Posts by Rocky Giglio
23 NYCRR Part 500 - NYDFS AI Guidance Explained
NYDFS issued May 2026 guidance on frontier AI cybersecurity risks under 23 NYCRR Part 500. Here's what regulated firms must do now.
Read More
How to Build a Mythos-Ready Security Program
Claude Mythos changed the math on vulnerability discovery. Here is what the CSA, SANS, and OWASP community says your security program needs to do about it.
Read More
VulnOps - Why Automated Vulnerability Management Is No Longer Optional
Anthropic confirmed what researchers have been saying for the last year or more: AI will allow the world to find zero days and exploit them faster than ever before. Mythos isn’t new in concept but made this a concern that we can’t ignore. SANS, the Cloud Security Alliance, [un]prompted, and the OWASP GenAI Security Project responded with an emergency strategy briefing, “The AI Vulnerability Storm: Building a Mythos-Ready Security Program,” built by 60+ contributors and reviewed by 250+ CISOs in a single weekend — a full breakdown of that briefing is here. Their conclusion: organizations must stand up a permanent VulnOps function within 12 months. Now Google has confirmed in its May 2026 threat intelligence report that this isn’t theoretical. Adversaries are already using AI to discover and weaponize zero-day vulnerabilities in the wild. The cat is out of the bag, and the attacks are not coming. They are here.
Read More
Why AI Is No Longer Optional for Vulnerability Management
Security teams don’t have a vulnerability shortage. They have a signal shortage. The average organization has thousands of open CVEs at any given moment, and traditional vulnerability management programs weren’t built to handle that volume. They were built for a world where the attack surface was a known perimeter and patch cycles were measured in quarters.
That world is gone. What’s taken its place requires a different approach: one that can ingest threat intelligence at scale, understand exploitability in context, and act faster than an attacker’s first move. That’s not a human-speed problem. That’s an AI problem.
Read More