Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Cybersecurity teams have faced major shifts before—from advanced persistent threats to ransomware. Now, Frontier AI is accelerating vulnerability discovery and creating new challenges for defenders. In this episode of Let's Talk Security, Forescout CEO Barry Mainz sits down with cybersecurity evangelist and former practitioner Karsten Abata to discuss the concept of the "Control Gap"—the time between identifying a risk and having the controls in place to effectively contain it.

How do you prepare for a zero-day attack before one impacts your organization? In this video, Daniel dos Santos explains why security teams should use past vulnerabilities and real-world attack scenarios to rehearse response plans. By testing decisions, controls, communications, and recovery actions—not just documentation—organizations can build confidence and improve readiness for future threats.

What can organizations do when a critical vulnerability can't be patched right away? In this video, Daniel dos Santos, VP of Research, explains how a network-first approach can reduce exploitability by restricting access to vulnerable services while remediation is underway. By limiting reachability, security teams can reduce risk and give patching teams the time they need to test and deploy fixes.

Discovering a vulnerable asset doesn't have to trigger panic. In this video, Daniel dos Santos explains how organizations can reduce risk while investigations are still underway by limiting reachability, tightening access controls, and using segmentation to restrict exposure—without disrupting critical business operations.

In this video, Daniel dos Santos, VP of Research, explains why organizations should establish a zero-day containment playbook before a crisis occurs. A well-defined playbook connects response actions to assets, critical services, and business functions while outlining decision-making, impact validation, and crisis communication processes. When a real-world zero-day strikes, there is no time to create a plan from scratch. Preparation helps teams respond faster, align stakeholders, and reduce uncertainty during high-pressure situations.

When a critical vulnerability is announced, the first response is often urgency—and sometimes panic. But not every vulnerable asset presents the same level of risk. In this video, Daniel dos Santos, VP of Research, explains how reachability helps security teams move beyond broad vulnerability hunting and focus on the assets that are both vulnerable and exposed in ways that matter to the business. By understanding reachability, organizations can prioritize response efforts, reduce noise, and bring structure to vulnerability management.

What separates a calm security team from one that's scrambling during a zero-day? Daniel dos Santos discusses the importance of asset visibility, network reachability, pre-approved controls, and response playbooks when responding to emerging threats.

Defenders have gained early access to powerful AI tools, creating an opportunity to improve security outcomes and strengthen cyber resilience. But as these capabilities become more widely available, that advantage may not last. Rik Ferguson, VP of Security Intelligence at Forescout, shares his perspective on what security teams should be doing now to prepare.

Most security programs were built for a slower clock. But as AI-assisted and autonomous attackers accelerate the pace of attacks, manual approval gates can become the point where defenders fall behind. This short video explores why security teams need to reexamine the processes, decision points, and response workflows that may slow them down when speed matters most.

The window between vulnerability disclosure and exploitation is shrinking. As exploit development accelerates, organizations can no longer afford to wait for a vulnerability to be disclosed or a patch to become available before taking action. Daniel dos Santos, VP of Research, explains why effective zero-day response depends on preparation that happens before an incident occurs.