IT Teams Shift to Exposure Reduction as AI-Driven Vulnerability Backlogs Top Thousands
Updated
Updated · Computerworld · Oct 21
IT Teams Shift to Exposure Reduction as AI-Driven Vulnerability Backlogs Top Thousands
2 articles · Updated · Computerworld · Oct 21
Summary
Thousands of vulnerability findings and hundreds tagged critical are pushing IT and security teams to prioritize exploitable exposures instead of trying to fix every flaw.
AI-assisted discovery and sprawling mixes of endpoints, cloud services and applications have outpaced weekly or monthly scan-and-report programs, making point-in-time remediation lists stale quickly.
Continuous compliance replaces that snapshot model by monitoring new disclosures, configuration changes and newly exposed assets in real time, then verifying fixes with audit-ready evidence rather than closed tickets.
Automation is best suited to routine OS, application and policy-based configuration fixes, while higher-impact changes such as production database patches and network-control updates still require human review.
Ivanti's 2026 State of Cybersecurity Report says better measures are time to remediate actively exploited flaws, internet-facing exposures over time and the share of critical services without known exploitable weaknesses.