E034 - Researching Threats

In this episode, Bharat Jogi, Senior Director of Vulnerability and Threat Research at Qualys, discusses the intricacies of threat research, the growing landscape of vulnerabilities, and the importance of responsible disclosure. He emphasizes the need for curiosity and creativity in cybersecurity roles, the challenges of managing an influx of vulnerabilities, and the balance between privacy and security. Bharat also shares insights from Qualys' annual vulnerability report, highlighting the staggering number of CVEs and the need for effective vulnerability management strategies. Bharat Jogi on LinkedIn: https://www.linkedin.com/in/bharat-jogi-3a680b13 Qualys Threat Research Unit: https://www.qualys.com/tru regreSSHion vulnerability info: https://blog.qualys.com/vulnerabilities-threat-research/2024/07/01/regresshion-remote-unauthenticated-code-execution-vulnerability-in-openssh-server Chapters 00:00 Intro 00:38 Introduction to Threat Research 04:39 The Role of Threat Researchers 16:29 Responsible Disclosure and Communication 23:24 Annual Reports and Industry Insights 27:35 The Challenges of Patch Management 34:31 The Balance of Privacy and Security 39:37 Reflections 48:15 Outro