Chris Hughes: The Security Democratization Gap

About this episode

Welcome back to Zero Signal! In this episode, hosts Conor Sherman and Stuart Mitchell sit down with Chris Hughes, founder of Resilient Cyber, three-time author, and Cyber Innovation Fellow at CISA. Facing a projected surge of up to 66,000 CVEs in 2026, Chris breaks down why the industry's historical vulnerability backlog is colliding with AI-driven discovery. He addresses the growing gap between vulnerability volume and actual exploitability, urging security leaders to move beyond dumping raw, context-free spreadsheets onto development teams and instead embrace true business alignment.

The discussion explores the exponential expansion of the modern attack surface—highlighting GitHub's trajectory from 1 billion to 14 billion commits in a single year—and the security implications of democratized, AI-assisted coding. Chris, Conor, and Stu examine the current state of autonomous remediation, discussing why AI-generated patches often prove brittle or fail to address root causes. Finally, the conversation tackles the intersection of AI governance, the shift from model-centric security to securing the entire system harness, and the delicate balance between policy frameworks and maintaining national competitive advantage.

About the Guest

Chris Hughes is the founder of Resilient Cyber, a publication read by tens of thousands of security professionals weekly. He is a three-time author and serves as a Cyber Innovation Fellow at CISA.

Key Moments

• The 2026 Vulnerability Explosion & Focusing on Real Exploitability

• Shifting Security Left vs. "Shifting Sh*t Left": Moving Beyond Spreadsheet Dumps

• The Attack Surface Exponential: Managing 14 Billion Commits & AI-Generated Code

• AI Governance & Policy: Securing System Harnesses Without Stifling Innovation

Meet our Sponsors

RISCPoint Security & compliance consulting tailored to your business: https://www.riscpoint.com/

Hampton North is the premier US-based cybersecurity search firm: https://hamptonnorth.com/?utm_source=website&utm_medium=podcast&utm_campaign=aware_global_swsd_all&utm_content=zero-signal

Sysdig is the leader in AI-powered real-time cloud defense: https://www.sysdig.com/?utm_source=website&utm_medium=podcast&utm_campaign=aware_global_swsd_all&utm_content=zero-signal