POV: AI Broke Your Backlog. Now What?

​AI can now find a 27-year-old vulnerability hiding inside a trusted operating system in two days. It cost $20,000 to compute. A human researcher might never have thought to look.

​That is the upside. Here is the problem it created.

​Bug submissions are up 76% year-on-year. The average time to fix a vulnerability has stretched from 160 to 230 days. And the gap between a bug being found and being actively exploited has collapsed to less than 22 hours. Security teams are not just dealing with more findings. They are dealing with a fundamentally different operating environment where speed, volume, and noise have all scaled at once.

​For CISOs, this raises a question that no vendor dashboard can answer: when everything your tools surface looks like a priority, how do you decide what actually is one?

​This is compounded by a growing problem the industry is only beginning to name. AI-generated vulnerability reports, submitted in bulk with limited evidence and no proof of real-world impact, are flooding security queues alongside legitimate research. The result is a triage crisis. Teams burn cycles sorting speculative findings from genuine risk, and the window to act on the real threats keeps shrinking.

​Moderated by Nasdaq's Kristina Ayanian, this panel brings together security leaders who are navigating this shift in real time. The conversation will focus on how CISOs are rethinking prioritization when discovery outpaces remediation, what the rise of AI-generated noise means for team capacity and board-level reporting, and why the organizations that come through this period successfully will be the ones that keep human judgment at the center of their security programs, not the ones that simply automate more.

Event Hosted by Bugcrowd & HPE Networking. Sponsored by Pi Security, Cytix, and Vijil.