YYury Butuzov2d ago · 2 min readEach attack has a price. The goal is to make this price higherAn attacker running agents against thousands of organizations still has a finite budget for compute and infrastructure. AI lowered the cost of each attempt, yet each target gets only a limited share oyurybutuzov.hashnode.dev
YYury ButuzovOct 10 · 14 min readA Vulnerability Is Not an Exposure2,300 Found, 421 Fixed In November 2024 Google reported the first public case of an AI agent, Big Sleep, finding a previously unknown exploitable flaw in real software: a memory-safety bug in SQLite, yurybutuzov.hashnode.dev
YYury ButuzovSep 10 · 10 min readThe Anatomy of Exposure: Why the Market Cannot Agree on What Counts as One15,000 exposures, fewer than one per cent of them CVEs In May 2024, XM Cyber and the Cyentia Institute estimated that a typical organisation had about 15,000 exposures. Fewer than one per cent were vuyurybutuzov.hashnode.dev
RReetain RainaSep 4 · 15 min readHow AI Is Changing Patching and What Devs Need to Know About Exposure ManagementWhen a vulnerability scanner reports 23 vulnerabilities in your application, of which 4 are critical, 7 are high, and the remaining 12 are medium, at first glance the answer seems clear: start patchin1freecodecamp.org
YYury ButuzovAug 2 · 39 min readPart 3. Security Forecast 2026–2028: Same Market, Two Different MapsLarge platforms are moving into AI. Specialists are moving into Exposure. The gap matters more than the ranking. 0. Introduction Ten of the eleven public security vendors I tracked moved into AI Securyurybutuzov.hashnode.dev
