Showing 2 episodes for Vulnerability Management
#254
December 1, 2025
EP254 Escaping 1990s Vulnerability Management: From Unauthenticated Scans to AI-Driven Mitigation
Guest:
- Caleb Hoch, Consulting Manager on Security Transformation Team, Mandiant, Google Cloud
Topics covered:
- How has vulnerability management (VM) evolved beyond basic scanning and reporting, and what are the biggest gaps between modern practices and what organizations are actually doing?
- Why are so many organizations stuck with 1990s VM practices?
- Why mitigation planning is still hard for so many?
- Why do many organizations, including large ones, still rely on unauthenticated scans despite the known importance of authenticated scanning for accurate results?
- What constitutes a "gold standard" vulnerability prioritization process in 2025 that moves beyond CVSS scores to incorporate threat intelligence, asset criticality, and other contextual factors?
- What are the primary human and organizational challenges in vulnerability management, and how can issues like unclear governance, lack of accountability, and fear of system crashes be overcome?
- How is AI impacting vulnerability management, and does the shift to cloud environments fundamentally change VM practices?
#246
October 6, 2025
EP246 From Scanners to AI: 25 Years of Vulnerability Management with Qualys CEO Sumedh Thakar
Topics covered:
- How did vulnerability management (VM) change since Qualys was founded in 1999? What is different about VM today?
- Can we actually remediate vulnerabilities automatically at scale? Why did this work for you even though many expected it would not?
- Where does cloud fit into modern vulnerability management?
- How does AI help vulnerability management today? Is this primarily better prioritization? What is real?
- What is this Risk Operations Center (ROC) concept and how it helps in vulnerability management?
