Guest: <ul> <li dir="ltr" role="presentation"><a href= "https://www.linkedin.com/in/caleb-hoch/">Caleb Hoch</a>, Consulting Manager on Security Transformation Team, Mandiant, Google Cloud</li> </ul> Topics: <ul> <li>How has vulnerability management (VM) evolved beyond basic scanning and reporting, and what are the biggest gaps between modern practices and what organizations are actually doing?</li> <li>Why are so many organizations stuck with 1990s VM practices?</li> <li>Why mitigation planning is still hard for so many?</li> <li>Why do many organizations, including large ones, still rely on unauthenticated scans despite the known importance of authenticated scanning for accurate results?</li> <li>What constitutes a "gold standard" vulnerability prioritization process in 2025 that moves beyond CVSS scores to incorporate threat intelligence, asset criticality, and other contextual factors?</li> <li>What are the primary human and organizational challenges in vulnerability management, and how can issues like unclear governance, lack of accountability, and fear of system crashes be overcome?</li> <li>How is AI impacting vulnerability management, and does the shift to cloud environments fundamentally change VM practices?</li> </ul> Resources: <ul> <li dir="ltr" role="presentation"><a href= "https://cloud.withgoogle.com/cloudsecurity/podcast/ep109-how-google-does-vulnerability-management-the-not-so-secret-secrets/"> EP109 How Google Does Vulnerability Management: The Not So Secret Secrets!</a></li> <li dir="ltr" role="presentation"><a href= "https://cloud.withgoogle.com/cloudsecurity/podcast/ep246-from-scanners-to-ai-25-years-of-vulnerability-management-with-qualys-ceo-sumedh-thakar/"> EP246 From Scanners to AI: 25 Years of Vulnerability Management with Qualys CEO Sumedh Thakar</a></li> <li dir="ltr" role="presentation"><a href= "https://cloud.withgoogle.com/cloudsecurity/podcast/ep248-cloud-ir-tabletop-wins-how-to-stop-playing-security-theater-and-start-practicing/"> EP248 Cloud IR Tabletop Wins: How to Stop Playing Security Theater and Start Practicing</a></li> <li dir="ltr" role="presentation"><a href= "https://cloud.google.com/blog/topics/threat-intelligence/time-to-exploit-trends-2023"> How Low Can You Go? An Analysis of 2023 Time-to-Exploit Trends</a></li> <li dir="ltr" role="presentation"><a href= "https://services.google.com/fh/files/misc/m-trends-2025-en.pdf">Mandiant M Trends 2025</a></li> <li dir="ltr" role="presentation"><a href= "https://cloud.withgoogle.com/cloudsecurity/podcast/ep204-beyond-pcast-phil-venables-on-the-future-of-resilience-and-leading-indicators/"> EP204 Beyond PCAST: Phil Venables on the Future of Resilience and Leading Indicators</a></li> <li dir="ltr" role="presentation"><a href= "https://cloud.google.com/security/resources/datasheets/consulting-services-threat-and-vulnerability-management"> Mandiant Vulnerability Management</a></li> </ul>

Podurama

Home

Trending

Personal

Your Podcasts

New Episodes

My Files

Favourite Episodes

Tags (Folders)

Recently Played

Bookmarks

Followed Playlists

EP254 Escaping 1990s Vulnerability Management: From Unauthenticated Scans to AI-Driven Mitigation

Cloud Security Podcast by Google

AI Chapters

AI Insights

Reviews