E034 - Researching Threats

In this episode, Bharat Jogi, Senior Director of Vulnerability and Threat Research at Qualys, discusses the intricacies of threat research, the growing landscape of vulnerabilities, and the importance of responsible disclosure. He emphasizes the need for curiosity and creativity in cybersecurity roles, the challenges of managing an influx of vulnerabilities, and the balance between privacy and security. Bharat also shares insights from Qualys' annual vulnerability report, highlighting the staggering number of CVEs and the need for effective vulnerability management strategies.

Bharat Jogi on LinkedIn: https://www.linkedin.com/in/bharat-jogi-3a680b13
Qualys Threat Research Unit: https://www.qualys.com/tru
regreSSHion vulnerability info: https://blog.qualys.com/vulnerabilities-threat-research/2024/07/01/regresshion-remote-unauthenticated-code-execution-vulnerability-in-openssh-server

Chapters
00:00 Intro
00:38 Introduction to Threat Research
04:39 The Role of Threat Researchers
16:29 Responsible Disclosure and Communication
23:24 Annual Reports and Industry Insights
27:35 The Challenges of Patch Management
34:31 The Balance of Privacy and Security
39:37 Reflections
48:15 Outro