Exploit Development, Agentic Vulnerability Discovery, and Fake PoCs

AI is changing cybersecurity, accelerating vulnerability research and exploit development while raising new questions about reliability, risk, and guardrails. Daniel and Chris talk with Spencer McIntyre, Director of Exploit Development at VulnCheck, about how agents are being used to discover vulnerabilities, why many proof-of-concept exploits (POCs) fail to deliver, and how initial access intelligence helps security teams prioritize real threats. They also explore the limitations of AI-assisted exploitation, the challenges of AI guardrails for security researchers, and what these developments mean for the future of threat intelligence.
Featuring:

• Spencer McIntyre – LinkedIn
• Daniel Whitenack – Website, GitHub, X
• Chris Benson – Website, LinkedIn, Bluesky, GitHub, X
Links:

• VulnCheck
• Go Exploit framework
• Initial Access Intelligence
Sponsors:

• Hostinger: Create your website today. Go to hostinger.com/practical and use practical for 10 percent off now.
Resources and Events:

• Register for upcoming webinars here!
• Prior Webinars from our partner Prediction Guard
• Midwest AI Summit 2026
Chris’s new book The Art of Swarming will be published soon, written to be the seminal foundational book for the fledgling swarming industry, defining the principles and architecture that enable autonomous agentic UxS swarms with emergent distributed embodied intelligence.