Building a risk-based vulnerability management program that scales

Shankar Somasundaram, CEO at Asimily, outlined a risk-based vulnerability management program in a video for Help Net Security, stating that vulnerabilities are increasing exponentially due to AI-driven attacks. He reported that one customer discovered a thousand vulnerabilities for every one previously known, and argued that patching everything is impractical while CVSS scores are unreliable because two-thirds of published CVEs are marked high risk. Somasundaram advocated for a more targeted approach to prioritize and scale vulnerability management.