SANS Cyber Defense Initiative 2026 - SANS@Night: Half a Risk Decision: What AI Just Exposed About Cybersecurity

Your vulnerability program has gotten very good at one question: how likely is this to be exploited? CVSS, EPSS, KEV...years of maturity spent sharpening the same half of the risk equation. Then AI arrived and started chaining low-severity findings into full compromises at machine speed, turning "unlikely" into "inevitable." The precision we worked a decade to build is becoming table stakes overnight.

This session takes you to the half of the equation the industry quietly skipped and to a real enterprise that ignored severity scores entirely and came out ahead. You may not be as mature as your dashboards suggest. Come find out where you actually stand.