Breaking the Patch Sound Barrier Part 2: So Is The Apocalypse Coming and What Is It?

This blog post defines a "Vulnerability Apocalypse" as a simultaneous rapid increase in (1) the number of vulnerabilities (including zero-days), (2) speed of exploit development, (3) volume of exploitation, and (4) resultant incident damage; it argues that simply patching faster is insufficient and proposes a 15-minute patching thought experiment to identify architectural and process changes that would enable much faster, more effective remediation.