From Findings to Fixes: AI Alone Isn't Enough | Scott Kuffer | Black Hat USA 2026

Everyone is talking about using AI to fight AI. But when it comes to vulnerability management, is that really the answer?

In this presentation from Black Hat USA 2026, Nucleus Security Co-founder and Chief Product Officer Scott Kuffer challenges the industry's growing obsession with AI-first security outcomes and explains why organizations need more than autonomous agents, AI-generated prioritization, and endless vulnerability discovery to reduce risk.

Instead of focusing solely on finding more vulnerabilities, Scott explores what actually drives meaningful security outcomes: building scalable remediation programs, improving coordination across teams, and creating automation pipelines that turn findings into fixes.

As organizations face increasing vulnerability volume, shrinking remediation windows, and growing pressure from executives and boards, the future of vulnerability management depends on moving beyond discovery and building systems that consistently drive action.

Whether you're a CISO, security leader, vulnerability manager, security engineer, or DevSecOps practitioner, this session offers practical insights into how modern security programs can leverage AI effectively while keeping remediation at the center of their strategy.

Speaker: Scott Kuffer, Co-founder & CPO, Nucleus Security

📌 Learn more about Nucleus Security: https://nucleussec.com