~/talk

Is Vulnerability Management Dead? A Security Architect’s...

Talkat BSidesSF 2025 · 2025-04-26..04-27· [security, devops-and-delivery]
links:none on file
slides:none on file

Research shows 62% of incidents tie directly to vulnerabilities and misconfigurations and most cloud-forward enterprises sit on 100+ critical backlog items; 49% of tickets stall while teams decide the right remediation path, 26% are effectively unremediable, and roughly 20% have no vendor patch. Security engineers spend 6–8 days per month just on prioritization, app fixes can take >8 weeks, and time-to-exploit is down to about 5 days — so the workable path is unified data, IaC-to-asset correlation, cloud guardrails and using AI for contextual triage and mitigation planning.

AI-written summary · about

  1. 0:00Introduction and speaker background
  2. 3:36Research findings on vulnerability management
  3. 12:45Why vulnerability management is failing
  4. 20:14Effective strategies for exposure management
  5. 27:57The role of AI in modern security
  6. 29:01Q&A on AI and remediation
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.