Ep 27 - Claude Code Security, The $152 Vuln, and the AppSec Reckoning Nobody Is Ready For

🎙️ Coffee, Chaos and ProdSec, Ep 27

Anthropic dropped Claude Code Security and wiped $10 billion off cybersecurity stocks in a single afternoon. Some of that panic was justified. Most of it wasn't.

This week Kurt, Cameron, and special guest Blake Beus, a software engineer turned AppSec dark sith lord, dig into what actually changed and what the industry is getting completely wrong about it.

They break down the DARPA AIxCC result that nobody talks about enough, where AI systems found real vulnerabilities in production code for $152 a finding. They get honest about the 20-year AppSec loop that is finally breaking, which careers are quietly at risk, and what the team of 2028 actually looks like. Then they get into the compliance gap that is going to catch organizations off guard, and call out the security vendors who are already in trouble and just don't know it yet.

Blake brings the hot takes. Cameron brings the concern. Kurt holds the architecture together. It gets spicy.

If you work in Application Security, Product Security, DevSecOps, AI Security, or Software Supply Chain Security, this one is going to hit close to home.

☕ New episodes every Wednesday.

Coffee, Chaos and ProdSec -> strong coffee, stronger opinions.