Exploit Development, Agentic Vulnerability Discovery, and Fake PoCs
9. Exploit Development, Agentic Vulnerability Discovery, and Fake PoCs
Open the permanent podcast page
Show: Practical AI
Focus: Agents for Everyone
Date: October 22, 2026
Duration: 45:13
Summary: Practical AI interviews VulnCheck’s Spencer McIntyre about the difference between finding a vulnerability and demonstrating attacker utility. The transcript covers exploit validation, unreliable proof-of-concept code, prioritization, guardrails and human judgment. It is a practitioner interview, not a controlled comparison of AI security tools.
Why it matters: Use the episode to separate an AI-generated vulnerability claim from a validated exploit, business exposure and remediation priority. Require reproducible evidence before escalating headlines into emergency work.
Coverage: Selected for this edition.
Listen / watch: Practical AI