Breaking Vulnerability Management's 30-Year Logjam: Two Cyber Veterans Attack It With AI

Breaking Vulnerability Management's 30-Year Logjam: Two Cyber Veterans Attack It With AI

From Security Cocktail Hour by Joe Patti and Adam Roth

February 23, 2026 · 49 min · Episode 71

About this episode

Two cybersecurity veterans discuss how AI can transform vulnerability management.

Sharon Isaaci and David Warshavski spent careers on the offensive side of cybersecurity — breaking into organizations, finding zero-days, and cleaning up after the breaches that followed at Sygnia, Israel's premier incident response firm. After hundreds of engagements, they kept finding the same thing on both sides of the wire: breaches happen not because vulnerabilities go undetected, but because they go unmanaged. Vulnerability management has been stuck for 30 years. More tools, more alerts, more dashboards — and vulnerability exploitation as a breach cause nearly tripled in 2024 alone. When ChatGPT arrived in late 2022, Sharon and David saw the missing piece: the organizational context that could fix the problem had always existed, scattered across Slack, email, wikis, and internal tools. GenAI finally made it possible to pull that together at scale. In this conversation, we get into how two practitioners who've spent careers attacking organizations are now applying that attacker's lens — automated with AI — to break open a field that's resisted change for decades. We cover why visibility was never the real problem, what context-driven prioritization actually looks like, and…

People in this episode

Hosts: Joe Patti, Adam Roth

Guests: Sharon Isaaci, David Warshavski

Topics covered

  • vulnerability management
  • cybersecurity
  • AI in security
  • incident response
  • context-driven prioritization

Keywords

  • vulnerability management
  • cybersecurity
  • AI
  • incident response
  • breaches
  • context-driven prioritization
  • ChatGPT

Mentioned in this episode

Organizations: Sygnia

Products: ChatGPT

More episodes of Security Cocktail Hour

Explore listener stats, chart rankings, contacts and more on the Security Cocktail Hour podcast page.