Discussion about this post

User's avatar
Cyril Simonnet's avatar

The twenty-minute solve time is rarely the actual problem. You hit it right, the schedule gets set by what happens before the fix, or what prevents it from being discovered in the first place. For security, we spend too much effort optimizing response when the detection mechanisms themselves are failing. The real cost comes from not seeing the breach for months, not from the time it takes to patch a single vulnerability once identified. That initial blind spot, that's where the damage accumulates.

https://cyrilsimonnet.substack.com/p/shinyhunters-keeps-getting-let-in?utm_source=substor&utm_medium=substack&utm_campaign=comment

Eric Cabrol's avatar

"Surrogate models that replace the solve are attacking the twenty minutes"

I don't share the same feeling. Surrogate models are here mostly to address HPC intensive calculations, where the time unit is the hour (if not the day), not the minute.

2 more comments...

No posts

Ready for more?