Why it matters
David Brumley has spent two decades turning people into hackers, from founding picoCTF to recruiting pwn2own winners at Carnegie Mellon.
My takeaway: Teaching AI to Find Real Vulnerabilities — David Brumley, Bugcrowd is an agent-security signal. The practical read is that autonomy, memory, tool permissions, and third-party integrations are the control surface that needs threat modeling and monitoring.