· ai-devtools
Qualys CISO discusses handling AI-discovered vulnerabilities, tracking exposure window
Nathan Smolenski, the CISO at Qualys, discussed how security departments can manage the increasing quantity of vulnerabilities unearthed by artificial intelligence.
During an interview with Help Net Security, Smolenski elaborated on a key metric for CISOs: tracking the average window of exposure rather than relying on the conventional MTTR.
He further noted that only a minor fraction of disclosed flaws, projected to be less than one percent in 2025, actually present an active danger.
Smolenski also addressed the methods for fostering confidence in automated remediation workflows.
This trust can be built using asset tiering, incorporating human review steps, and establishing rollback procedures.
