unpromptedconf takeaways: security programs face forced change as reachable vulnerabilities can't be risk-accepted
scottleibrand · x · 2026-10-31
Sean Cassidy's takeaways from unpromptedconf: security programs long staffed to prioritize business outcomes ran on the minimum security that passed customer or compliance scrutiny, and that will be changed by force. He adds that reachable vulnerabilities can no longer be risk-accepted away — severity dictates fix order, not whether they get fixed.
More from Safety
- First machine-checked security proof for end-to-end x86 process execution published — banteg · 2026-10-31
- Stealthy agent worms would route model calls through compromised machines — matthew_d_green · 2026-10-31
- Halloween joke nails data harvesting: full candy bar for your dad's Gmail access — Danhightower · 2026-10-31
- Professor runs Pangram on 50 pre-ChatGPT self-published novels: zero false positives — TuhinChakr · 2026-10-31
- Researcher disputes Berkeley law professors' brief over Pangram false-positive claims — TuhinChakr · 2026-10-31
- ChatGPT Daybreak Blue sessions may train OpenAI models even with training opt-out off — littmath · 2026-10-31