Shimon argues 2026 collapsed the remediation window: AI writes exploits on demand, so "is there a public exploit?" is the wrong question and severity-based prioritization is dead. They get into FedRAMP shrinking critical remediation from 30 days to 12 hours, validating reachability and runtime instead of trusting CVSS, tailored WAF and eBPF policies as compensating controls, and why autonomous remediation is a people and process problem more than a tech one. Plus whether we're the last generation of coders, why GitHub and Git are hitting their limits, AI loops that improve themselves, token costs on the API side, and how AI is changing who gets to build.
Chapters
00:00 Meet Shimon Tolts
00:36 From PC kid to McAfee, Unity and Copperhelm
01:50 AI stretches cloud guardrails past their design
03:39 Prioritization as a strategy, and the window that closed
05:00 Every CVE has an exploit now
06:27 The barrier to entry is gone
07:45 Are we the last coders?
10:44 Volume, autonomy, cost, and FedRAMP's 12-hour SLA
12:31 Who can actually hit 12 hours?
15:05 Prioritization is dead: validate reachability and runtime
17:41 Mitigation first: tailored WAF and EDR policies
19:40 18 months to tune a WAF by hand
21:12 Pre-AI vs post-AI agents, and Git that can't keep up
23:49 The great replatforming
24:16 Only 25% "weaponized"? Not anymore
26:58 What comes next: loops
29:00 Token burn and running agents on the API
30:48 Joe's inbox agent
33:42 A 76-year-old writing a book with AI
35:49 Is the market adopting fast enough?
37:16 Wrap-up
Shimon Tolts: https://www.linkedin.com/in/shimontolts/ (verify)
Copperhelm: https://copperhelm.com (verify)
Subscribe: https://www.youtube.com/@securityunfilteredpodcast
Show site: https://www.securityunfiltered.com
Affiliates
➡️ OffGrid Faraday Bags: https://offgrid.co/?ref=gabzvajh
➡️ OffGrid Coupon Code: JOE
➡️ Unplugged Phone: https://unplugged.com/
Unplugged's UP Phone - The performance you expect, with the privacy you deserve. Meet the alternative. Use Code UNFILTERED at checkout
*See terms and conditions at affiliated webpages. Offers are subject to change. These are affiliated/paid promotions.
Tesla Referral Code: https://ts.la/joseph675128
Follow the Podcast on Social Media!
Instagram: https://www.instagram.com/secunfpodcast/
Twitter: https://twitter.com/SecUnfPodcast