Qualys CISO on what security teams can do as exploit campaigns grow

As cited

Copy frozen at 2026-10-29 08:40 UTC (site build).

vulnerabilities

Qualys CISO on what security teams can do as exploit campaigns grow

Nathan Smolenski, CISO at Qualys, discusses how security teams should prioritize vulnerabilities as artificial intelligence (AI) discovers more flaws. He recommends tracking average window of exposure rather than mean time to remediation (MTTR), noting that under one percent of disclosed vulnerabilities in 2025 posed active risk. Smolenski also outlines how teams can build confidence in autonomous remediation through asset tiering, human review, and rollback capabilities.

Why it matters: Security teams managing growing vulnerability volumes need practical metrics and processes to focus remediation efforts on flaws that actually pose risk, avoiding alert fatigue and resource waste.

Source published

2026-10-29 06:30 UTC

First seen by Cybersecurity Tracker

2026-10-29 07:58 UTC