Rain Versus Flood, Making Sense of the 2026 CVE Surge
About this episode
Jerry Gamblin discusses the projected surge in CVEs for 2026 and the implications for cybersecurity defenders.
CVEs are on pace to hit nearly 70,000 in 2026, but Jerry Gamblin explains why the actual exploitable risk is staying surprisingly flat. Description Jerry Gamblin runs RogoLabs and built CVE.ICU, and he co-authored the FIRST mid-year vulnerability forecast that just put 2026 on pace for nearly 70,000 CVEs. He joins Resilient Cyber to separate the scary headline number from what actually matters for defenders. We get into why GitHub now publishes one in five CVEs, the rain versus flood distinct...
More episodes of Resilient Cyber
- Resilient Cyber w/ Joshua Saxe - Why Restricting AI Makes Us Less Secure
- Cyber Valuations, Moats & the Road to Black Hat
- Building an AI AppSec Engineer
- Why Finding Vulnerabilities Was Never the Hard Part
- You Don't Need A Frontier Model to Find Zero Days
- AI Industrialized the Vuln Lifecycle and Broke the System of Record
Explore listener stats, chart rankings, contacts and more on the Resilient Cyber podcast page.