PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Finding Fast, Fixing Slow: The Rising Exposure Debt

hackerone.com | blog | #ai-security | #vulnerability-management | #remediation | #metrics | #hackerone | #exposure-debt | #backlog
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Vulnerability submissions are up 76%. Unresolved criticals grew 25x. HackerOne platform data reveals a widening remediation gap that security teams can't afford to ignore.
Published
Collected

Related coverage

blog · hackerone.com
Measuring The Fix: How We Evaluate Frontier Models on Remediation Quality
HackerOne tested frontier models on security fix quality and found the judge mattered more than the model. See how CTEM remediation earns engineer trust.
blog · hackerone.com
New CTEM Metrics That Matter: How to Brief Your Board on AI-Accelerated Exposure
HackerOne argues vulnerability counts no longer brief boards well and proposes CTEM metrics like Time to Validate, as AI-accelerated discovery compresses exploitation timelines.
blog · hackerone.com
Fixing the Fix Gap: Introducing H1 Remediation
HackerOne introduces H1 Remediation to close the fix gap: source code-informed fix plans grounded in proven exploits are delivered into engineering workflows as critical backlogs grow.
blog · borghq.io
How to Prioritise Security Findings That Have No CVE
CVSS, EPSS and KEV are all built around published CVEs, so they cannot score findings in your own application code. This practical guide shows how to rank exploitable issues like tenant boundary flaws in a continuous testing queue.
blog · netspi.com
Recurring Vulnerability Management Challenges That Can't Be Ignored
NetSPI outlines recurring vulnerability management challenges: vulnerability floods, fragmented scanner tracking, 12-day average remediation coordination losses, and compliance-driven blind spots.
blog · netspi.com
Are You Flooded With Vulnerabilities?
NetSPI argues risk-based prioritization is key to vulnerability floods, proposing a five-phase lifecycle of discovery, correlation, verification, prioritization, and remediation to close the fix gap.
Back