Champion / Spokesperson(s): Brendan Putek, Director of DevOps, and Esaie Batoula, Security Engineer. Relay Network is the innovator behind a secure B2C communications platform that combines SMS with dynamic feed technology to help regulated enterprises deliver personalized, action-oriented mobile experiences for every customer. In an industry where trust, compliance, and data protection are paramount, security has always been central to how the company builds software.
Snyk is now detecting six vulnerabilities for every one remediated. NIST reported a 33% increase in CVE submissions in Q1 2026. According to Gartner, the average time to patch a high/critical vulnerability is 55 days (Gartner, "How to Respond to the 2026-2027 Threat Landscape," 28 May 2026).
Your external attack surface is bigger than you think, and probably bigger than it was last quarter. Cloud sprawl, third-party integrations, abandoned subdomains, and shadow IT all add up to an internet-facing footprint that’s hard to track manually. External attack surface management (EASM) tools give security teams continuous visibility over that footprint, from the same vantage point an attacker would use.
2026 has turned "busy" into "under siege." Indusface's 2025 H1 AppSec report logged billions of AI-driven attacks on live sites and APIs in just six months. According to SecurityWeek, one botnet hurled 11.5 Tbps at a single target before Cloudflare soaked it up-uptime now equals resilience. Yet old wounds persist: MITRE's 2025 CWE Top 25 still lists cross-site scripting at number one, with SQL injection and CSRF close behind.
Major DevOps platforms patched 236 vulnerabilities in 2025, with nearly 60% classified as high or critical severity. According to the latest "DevOps Threats Unwrapped Report," critical flaws surged by 76% ifrom Q1 to Q4, signaling growing pressure on software supply chain security.
Vulnerability remediation is the process of fixing and validating security flaws in systems, applications, or infrastructure using patches, configuration changes, or compensating controls after they are identified and prioritized.
Vulnerability scanning gives security teams a starting point, but it has never been the whole picture. Scan results capture known CVEs across applications and systems, yet they say nothing about whether a given weakness is actually reachable, whether the controls around it are functioning correctly, or whether the people with access to it represent a meaningful risk. Exposure management addresses all of that.
Welcome to vulnerability management's big bang. If it feels like your security team is running a marathon on a treadmill set to a permanent incline of 12.0 with 50lb sandbags tied around each ankle, you're in good company. We have officially entered the era of the Great Vulnerability Acceleration. To put this recent synthetic bloom into perspective, consider this: in the last five years, the cybersecurity community has identified and recorded over 150,000 new vulnerabilities.
As large language models (LLMs) become more embedded in business operations, the risks and attack methods targeting them are evolving just as quickly. The 2025 edition of the OWASP Top 10 for LLM Applications reflects this rapid evolution, addressing the current threats facing generative AI systems in production environments. For organizations investing in LLMs, understanding the risks is crucial for deploying these systems securely.