“If your patching cadence still has the word ‘monthly’ in it, you’re defending against an adversary who abandoned that schedule a long time ago,” McKee warned.
Rather than attempting to patch everything faster, security teams should prioritize patching based on risk management questions and issues specific to their environments. Given attackers’ current preferences, security leaders should identify systems that are exposed to that remote, unauthenticated, zero-click attacking profile, and consider how many days of exposure they are willing to accept on each of them.
Concern over AI-orchestrated attacks rising
CSO parent company Foundry’s forthcoming Security Priorities report found that AI-enabled attacks tops the list of security leaders’ threat concerns, with 45% of CISOs rating their concern high.
