#1741674: Defending in the Shadow Era: When the CVE Feed Goes Dark
| Description: |
On May 11, 2026, Google's Threat Intelligence Group disclosed the first confirmed AI-built zero-day in the wild. The model that guided vulnerability management for fifteen years—CVE, CVSS, and vendor threat intel—is effectively finished. As NVD slows and KEV lags, AI-assisted attackers are now producing target-specific, one-off exploits that may never be discovered, attributed, or signatured. Join HD Moore, creator of Metasploit and CEO of runZero, as he walks defenders through the three eras of vulnerability management: the Cadence Era of predictable cycles, the Triage Era of AI-scale discovery, and the Shadow Era we just entered. While security dashboards stay green, the "Dark Wave" of unattributed exploitation is growing. What You’ll Learn: The Collapse of Attacker Economics: Why CVE-driven prioritization is a "rear-view mirror" now that AI has democratized exploit generation and collapsed time-to-exploit from years to hours. Industrialized Per-Target Campaigns: How AI makes it profitable for attackers to build one-off exploits that fly under the radar of your existing tools. The Survival Playbook: A radical return to the "Assume Breach" model, prioritizing comprehensive asset and attack surface intelligence over reactive patching. Validating Your Defenses: Techniques for ensuring segmentation will hold under attack — including finding hidden bridges, surfacing attack paths and choke points, and quantifying blast radius to determine where remediation is most critical. Don’t be caught in the dark. Learn how to build a VulnOps capacity that survives a world where perimeters are transparent and every asset — from rogue IoT to unmanaged OT — is a potential entry point. |
|---|---|
| More info: | https://dr-resources.darkreading.com/free/w_runz18/ |
| Date added | June 14, 2026, 2:26 a.m. |
|---|---|
| Source | Dark Reading |
| Subjects |
|
| Venue | June 16, 2026, midnight - June 16, 2026, midnight |
