Webinar: Rumors of the Vulnpocalypse Have Been Greatly Exaggerated

The Vulnpocalypse was supposed to be here by now. So where is it?

We traced every confirmed exploitation of a published CVE since 2018: all 3,769 of them, against the 253,912 published in that window. Adversaries never touched the other 98.5%.

Join us for a first look at the findings from our Vulnpocalypse Report, before it's publicly released.

At the end of the hour, you'll be able to answer:

• Whether AI is really growing your backlog faster, and what that changes about what you patch
• How to tell the 1.5% of CVEs that get exploited from the ones that never do
• Whether you should be planning for more zero-days than you were three years ago
• Why the median patch-to-exploit window is the wrong number to build an SLA on
• Which of your CVEs get attacked inside 30 days, and which sit untouched for over a year
• Which vendors and vulnerability classes are worth most of your patching hours

Attendees will get access to the full data in our upcoming Vulnpocalypse Report before it is publicly released. We hope to see you there.