Infosec News - Snowblind, BlackSuit, MOVEit, P2PInfect

David and Sagy break down OpenAI's new bug bounty program, the EU's Cyber Resilience Act (CRA), the strategically incoherent proposed $707 Million CISA Budget Cut, and Anthropic's Project Glasswing, an AI that found thousands of dangerous security holes.

CISA pushes OpenEoX for end-of-support tracking—is it a solution or just 'compliance theater'? Then, we dive into Anthropic's Claude Code Security, asking why AI is brilliant at finding bugs but still struggles with fixing them at scale. Finally, we break down the UK Government's claim of cutting cyber fix times by 84%—a true breakthrough or a policy win?

Sagy and Agnayee talk ENISA's promotion to CVE Program Root, the case for making CVE funding a national security imperative, and the U.S. Department of Commerce's Vulnerability Disclosure Program (VDP) found "not fully effective".