[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fb1qhRSdp9BuIRtzGCpx-CP9f6weFjmxNDtAETMm9zuk":3},{"article":4,"iocs":43,"watch_terms":44,"solutions":45,"lesson":133},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":20,"category":21,"article_tags":25},"81c6b575-fc43-49ee-b1ae-574df6e2884b","The Vulnerability Gap: Why Discovery Is Outrunning Repair","the-vulnerability-gap-why-discovery-is-outrunning-repair-c8eb4b","AI is discovering more vulnerabilities, faster, and under a tightening regulatory environment, making this an all-hands-on-deck moment for the cybersecurity community.","The rapid advancement of AI is significantly increasing the speed and volume of vulnerability discovery, creating a growing gap between when flaws are found and when they can be fixed. This trend, coupled with a more stringent regulatory landscape, is putting immense pressure on the cybersecurity community to adapt and improve their response mechanisms.","AI is accelerating vulnerability discovery, outpacing repair efforts amid increasing regulatory pressure.","https:\u002F\u002Fwww.darkreading.com\u002Fcybersecurity-operations\u002Fvulnerability-gap-why-discovery-is-outrunning-repair","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fblt198046baa5588c01\u002F6a8893cf43e45d54ab5d69fd\u002Fgap-DNY59-Getty-1406960089.jpg?width=720&quality=80&disable=upscale","2026-08-24T14:00:00+00:00","2026-08-24T18:00:21.897795+00:00",7,[17],{"name":18,"type":19},"AI","technology","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":20,"icon":22,"name":23,"slug":24},null,"Vulnerabilities","vulnerabilities",[26,28,33,38],{"category":27},{"id":20,"icon":22,"name":23,"slug":24},{"category":29},{"id":30,"icon":22,"name":31,"slug":32},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":34},{"id":35,"icon":22,"name":36,"slug":37},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":39},{"id":40,"icon":22,"name":41,"slug":42},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[],{"controls":46,"vendors":132},[47,76,104],{"slug":48,"name":49,"problem":50,"products":51},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[52,60,68],{"vendor_slug":53,"vendor_name":54,"vendor_logo":55,"product_slug":56,"product_name":57,"url":58,"description":59},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":61,"vendor_name":62,"vendor_logo":63,"product_slug":64,"product_name":65,"url":66,"description":67},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":72,"product_name":73,"url":74,"description":75},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":77,"name":78,"problem":79,"products":80},"patch-management","Automated patch management","Known holes get closed in days, not months.",[81,89,97],{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":85,"product_name":86,"url":87,"description":88},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":93,"product_name":94,"url":95,"description":96},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":77,"product_name":101,"url":102,"description":103},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"slug":42,"name":105,"problem":106,"products":107},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[108,116,124],{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"recorded-future","Recorded Future","\u002Fvendor-logos\u002Frecorded-future.png","recorded-future-cyber-operations","Recorded Future Cyber Operations","https:\u002F\u002Fwww.recordedfuture.com\u002Fproducts\u002Fcyber-operations","Threat intelligence built into security operations workflows, to prioritise alerts and act on threats before they arrive.",{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"reliaquest","ReliaQuest","\u002Fvendor-logos\u002Freliaquest.png","greymatter-digital-risk-protection","GreyMatter Digital Risk Protection","https:\u002F\u002Freliaquest.com\u002Fsecurity-operations-platform\u002Fdark-web-and-digital-risk-protection\u002F","Watches the open, deep and dark web for threats aimed at an organisation and alerts its security team in real time.",{"vendor_slug":125,"vendor_name":126,"vendor_logo":127,"product_slug":128,"product_name":129,"url":130,"description":131},"dataminr","Dataminr","\u002Fvendor-logos\u002Fdataminr.png","dataminr-threat-intelligence","Dataminr Threat Intelligence","https:\u002F\u002Fwww.dataminr.com\u002Fproducts\u002Fcyber-defense\u002Fthreat-intelligence\u002F","Real-time alerts on emerging cyber threats, exploited vulnerabilities and attacks relevant to your organisation, detected with AI across a large set of public data sources.",[],{"slug":134,"title":135,"body":136,"framework_refs":137,"framework_notes":149},"ai-accelerated-vulnerability-discovery-widens-the-remediation-gap","AI-Accelerated Vulnerability Discovery Widens the Remediation Gap","The rapid proliferation of AI-driven vulnerability discovery tools is uncovering flaws faster than most organizations can realistically patch or remediate them, creating a dangerous and widening exposure window. This gap is compounded by increasingly stringent regulatory requirements that mandate timely disclosure and remediation, leaving security teams caught between operational constraints and compliance obligations. Organizations that lack a risk-based prioritization framework are particularly vulnerable, as they struggle to determine which flaws demand immediate attention versus which can be scheduled. Without structured remediation workflows and adequate resourcing, the backlog of unpatched vulnerabilities becomes an ever-growing attack surface that adversaries can exploit at scale.",[138,139,140,141,142,143,144,145,146,147,148],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management Planning","NIST CSF 2.0: ID.RA (Risk Assessment), RS.MI (Mitigation)","NIST SP 800-53 RA-5: Vulnerability Monitoring and Scanning","NIST SP 800-53 SI-2: Flaw Remediation","ISO\u002FIEC 27001:2022 Annex A 8.8: Management of Technical Vulnerabilities","EU NIS2 Directive: Article 21 – Security of Network and Information Systems","DORA (EU) 2022\u002F2554: Article 10 – ICT Vulnerability and Patch Management","GDPR Article 32: Security of Processing (risk-appropriate technical measures)","ITIL 4: Problem Management Practice (proactive problem identification and remediation)",{}]