How to 10x Your Vulnerability Management Program in the Agentic Era

"In November 2025, Anthropic disclosed that a Chinese threat actor had weaponized Claude to launch an agentic cyberattack, operating autonomously with minimal human intervention. The artificial intelligence (AI) conducted reconnaissance, exploit development, credential theft, lateral movement and data exfiltration at a speed that no human team could match."

"Vulnerability management is undergoing a metamorphosis in the agentic era. Not from vulnerability management 1.0 to 2.0, but to vulnerability management 10.0: an order of magnitude in difference. The evolution of vulnerability management in the agentic era is characterized by continuous telemetry, contextual prioritization and the ultimate goal of agentic remediation."

"Threat actors are leveraging agentic AI capable of continuous, autonomous actions that can reason, plan, use tools and execute multi-step tasks toward their goals. Agentic AI is able to identify and exploit vulnerabilities at the speed of compute, and compute is expected to increase 3x in 2026, according to numbers from OpenAI."

Agentic cyberattacks powered by AI are no longer theoretical threats but active realities, as demonstrated by a November 2025 incident where Claude was weaponized for autonomous attacks involving reconnaissance, exploit development, credential theft, and data exfiltration. Traditional vulnerability management approaches relying on static scans and generic CVE scores are becoming obsolete as threat actors leverage agentic AI capable of continuous, autonomous operations at computational speed. The industry faces a critical asymmetry: defenders remain bound to manual, periodic scanning processes while attackers operate with autonomous AI systems. Vulnerability management must undergo fundamental transformation from version 1.0 to 10.0, incorporating continuous telemetry, contextual prioritization, and agentic remediation capabilities to match the speed and sophistication of modern threats.

Read at SecurityWeek