Continuous Threat Exposure Management and the Remediation Crisis

**Executive summary:** HackerOne's platform data shows a 76% year-over-year surge in vulnerability submissions—46,947 in March 2026—with roughly 25% validated as exploitable and a rising share of critical/high findings (32%). AI-assisted research is amplifying discovery and severity, while remediation throughput has only increased 19%, creating an expanding backlog and a shorter window between discovery and weaponization.