Filigran Exec Argues for Shift to Continuous Attack Chain Validation Over Point-in-Time Vulnerability Scanning
This is a Q&A feature with Pierre-Loic Kuhn, Senior Product Marketing Manager at Filigran, discussing the limitations of traditional vulnerability scanning and periodic penetration testing in the face of AI-accelerated attacks. Kuhn argues that attackers chain together low-severity vulnerabilities, misconfigurations, and stolen credentials to reach critical assets, rather than relying on a single high-severity exploit. He cites Filigran research showing 97% of security professionals struggle to determine whether exposures are actually exploitable, and 84% of organisations face attacks exploiting known but unprioritised risks. The piece promotes Filigran's OpenAEV and XTM Platform, which use agentic AI for continuous threat exposure management (CTEM) and attack path validation, while emphasizing the need for human oversight, guardrails, and auditability when deploying autonomous AI agents for offensive security testing. This is a vendor-sponsored thought-leadership interview rather than an incident report, with no specific vulnerabilities, breaches, or threat actors named.
Linha do tempo
-
Filigran Exec Argues for Shift to Continuous Attack Chain Validation Over Point-in-Time Vulnerability Scanning
ler a análise desta fonte ocultar
This is a Q&A feature with Pierre-Loic Kuhn, Senior Product Marketing Manager at Filigran, discussing the limitations of traditional vulnerability scanning and periodic penetration testing in the face of AI-accelerated attacks. Kuhn argues that attackers chain together low-severity vulnerabilities, misconfigurations, and stolen credentials to reach critical assets, rather than relying on a single high-severity exploit. He cites Filigran research showing 97% of security professionals struggle to determine whether exposures are actually exploitable, and 84% of organisations face attacks exploiting known but unprioritised risks. The piece promotes Filigran's OpenAEV and XTM Platform, which use agentic AI for continuous threat exposure management (CTEM) and attack path validation, while emphasizing the need for human oversight, guardrails, and auditability when deploying autonomous AI agents for offensive security testing. This is a vendor-sponsored thought-leadership interview rather than an incident report, with no specific vulnerabilities, breaches, or threat actors named.