The Vulnerability Management Race Is Over. It's Time to Focus on Exposure.
Security Boulevard, Friday, April 17th, 2026
With Anthropic's Mythos Preview announcement, the race to patch all vulnerabilities is over. As defenders, we must move on.
We must focus on what adversaries can do after they exploit a vulnerability: which attack paths those exploits enable, where those paths lead, and how to eliminate them before they reach what matters. That is a tractable problem. It is also a fundamentally different one than vulnerability management, and it requires a fundamentally different program.