Vulnpocalypse Continues Until Defense Improves
SC Media, Thursday, October 29th, 2026
Security Weekly podcast covering Cisco's patching argument, AI refusals as vulnerability signals, PHP2Shell, Fortinet fixes and other security news.
This Paul's Security Weekly episode (PSW #950) rounds up the week's security news.
Items include Cisco arguing patch volume is outpacing defenders, citing 1,411 flaws in Microsoft's October Patch Tuesday and patch times up to 43 days, and proposing Snort virtual patching and an eBPF runtime shield, which the host calls partly a product pitch.
Other topics are turning AI refusals into vulnerability signals, PHP2Shell still hitting firewalls, Apple's October patches for older devices, new UK rules for undersea infrastructure, a Chinese model writing riskier code, and a Signal hang-up issue.
It also promotes a Nov 18 Government Security Virtual Summit.