Wrote a guest post on Cobalt's blog sharing why measuring vulnerability half-life using survival analysis is a more realistic performance metric for remediation than MTTR. Check it out, and lemme know whatcha think! #cybersecurity #infosec #appsec #thirdpartyrisk

www.cobalt.io/blog/half-li...

Are #cybersecurity incidents growing more costly?

Cyentia Institute's recent Information Risk Insights Study points to a 15-fold increase in the cost of incidents over the last 15 years.

Download the full report for rigorous analysis of this and other #cyberrisk trends. www.cyentia.com/iris2025/

Survey: 3/4 of orgs surveyed say their SLAs require #vulnerabilities to be fixed in 14 days.

Real data: Few meet this goal. The median time to resolution (MTTR) is 67 days for all #vulns found via #pentesting. #cybersecurity #infosec

See full report here: resource.cobalt.io/state-of-pen...

I’ll do a cat pic for my 1st (and perhaps only) post. Here’s a recent one of Guenhwyvar guarding the @rasalvatore.bsky.social book shelf in my daughter’s room. The Crystal Shard was the 1st fantasy novel I read; fun to see the 2nd generation enthralled with the stories of Drizzt & companions too.