The Claude Fable Saga - The 443 Podcast - Episode 375

This week on the podcast, we unpack the Claude Fable 5 release and subsequent revocation following an export control directive from the US federal government. After that, we cover the recent FortiBleed credential dump, discussing its likely origins, before reviewing the most recent Windows 0day disclosed by Nightmare Eclipse.

Quantitative vs qualitative risk analysis: Differences and when to apply each

Accelerating security solutions for small businesses‍ Tagore offers strategic services to small businesses. A partnership that can scale‍ Tagore prioritized finding a managed compliance partner with an established product, dedicated support team, and rapid release rate. Standing out from competitors‍ Tagore's partnership with Vanta enhances its strategic focus and deepens client value, creating differentiation in a competitive market.

The World Cup Creates the World's Largest Attack Surface

When 48 teams, 104 matches, 16 host cities, and a broadcast audience approaching half the planet converge across six weeks, something else converges at the same time: opportunity for the people trying to exploit it. The 2026 FIFA World Cup is the most complex digital event in history, and the security challenge it creates is not limited to the tournament organizers.

How to Use AI for Vulnerability Management

With over 48,000 CVEs published in 2025 and attackers weaponizing vulnerabilities in as little as 20 hours, traditional vulnerability management is no longer enough. This post breaks down the key findings from the SANS whitepaper The Exposure Gap: From Vulnerability Management to AI-Driven Control, and what it means for security teams trying to get ahead of risk. In 2025, over 48,000 CVEs were published. That’s roughly 130 new vulnerabilities every single day.

What is continuous application assurance? A new model for enterprise risk

Most CISOs can’t answer a simple question with confidence: are the controls protecting our most critical applications actually working right now? Not last quarter, or the last time someone ran an assessment, but right now. That’s not a failure of effort. Enterprise security teams run on thousands of applications. Each one carries contracts, regulatory obligations, and customer trust.

How to layer fraud checks on top of Anthropic's KYC Screener agent

Anthropic released a pre-built KYC Screener agent last month. It runs a four-step workflow on onboarding records to extract structured data from KYC documents, evaluate that data against a firm's KYC rules, screen named parties, and escalate exceptions to a compliance file for human review. The Anthropic template is purpose-built for meeting basic KYC compliance requirements during onboarding, and it lowers the cost of getting it right.

VMware ESXi 8.0 System Storage Changes Explained | ESX-OSData, Boot Partitions & Upgrade Guide

VMware ESXi 8.0 introduces significant changes to its system storage architecture, making storage management more flexible, scalable, and efficient. In this video, we explore the new ESXi 8.0 system storage layout, including the System Boot, Boot-bank 0, Boot-bank 1, and ESX-OSData partitions. Learn how the redesigned storage structure impacts performance, storage efficiency, virtual environment management, and upgrade planning. We also cover key storage behavior changes, ESX-OSData partition sizing, and important considerations for administrators upgrading to ESXi 8.0.

An independent code review of Persona's data practices

We believe trust is earned through demonstration and transparency, not promises. That’s why we worked with Trail of Bits, an independent security firm that has spent years reviewing the code behind widely-used software from cryptography libraries to critical open-source infrastructure. Persona regularly undergoes independent third-party audits across our security, privacy, and product programs.

PixelSmash - Critical FFmpeg Vulnerability Turns Media Files into Weapons

JFrog Security Research recently discovered and disclosed a critical vulnerability in FFmpeg, the world’s most widely deployed media processing framework. The discovered vulnerability, which we’ve named PixelSmash, is CVE-2026-8461 – a heap out-of-bounds write in the MagicYUV decoder (CVSS 8.8 High). We escalated this vulnerability from a simple crash all the way to reliable remote code execution – all it takes is processing a single malicious media file.

Strategic Investment: Navigating Cybersecurity in an Autonomous Era

Unlock the secrets to strategic investment in cybersecurity that every business leader needs to know. Avoid the pitfalls of over-investment and instead, focus on understanding your cybersecurity architecture, processes, and unique risks. Discover how a solid foundation can bolster your security architecture and enhance business operations. Protect your critical assets and ensure real-time visibility across your network.