Show Notes
Many organizations spend valuable security resources fixing vulnerabilities in code that never actually runs—an inefficient and often unnecessary effort. Jeff Williams, CTO and founder at Contrast Security, says that 62% of open source libraries included in software are never even loaded into memory, let alone executed. This means only 38% of libraries are typically active and worth prioritizing.
More from Error Code
Gaining root on an IoT device can open doors to cloud and remote networks, and make an adversarial attack relatively easy. Deral Heiland, Principal Security Research for IoT at Rapid 7, discusses his training at the IoT Village at DEF CON 34, where even beginners can understand how this is done so they can better prepare for these attacks.
At DEF CON 34, Bob Botezatu, Senior Director Of Threat Research At Bitdefender, discusses AI’s challenges in uncovering firmware vulnerabilities, highlighting the growing threat as criminal groups weaponize smart homes and connected devices.
At Black Hat USA 2026, cybersecurity experts issued a stark warning: we may have just three years to shore up the invisible web of keys and certificates that keeps power grids, billing systems, and critical infrastructure secure. Ellen Boehm of Keyfactor explains why the clock is ticking—and what must happen now with post-quantum cryptography.
Why one vendor breach can take down dozens of banks — third-party risk, AI-driven attacks, and why patching fast may beat patching safe today. Jeffrey Wheatman, Senior Vice President, Cyber Risk Strategist at Black Kite, explains.
AI is rewriting the OT attack playbook. Growing cloud exposure and CVE backlogs are testing the energy sector—and regulation alone won’t save it. Jori VanAntwerp, CEO and founder of Ember OT, discusses AI-driven attacks, NERC CIP 15, and why segmentation still matters.