The Evolving Cybersecurity Lexicon: Vulnerability Discovery to Resilience
Dark Reading, Monday, October 19th, 2026
An Omdia analyst argues the industry is conflating vulnerability volume with risk and should talk to boards about resilience and business impact.
Omdia principal analyst Theresa Lanowitz says vulnerability is the word of 2026 after Claude Mythos sparked talk of a vulnpocalypse, with CISA expecting about 96,000 CVEs this year.
She argues discovery is not exploitation and exploitation is not impact, so not every flaw must be fixed.
CISOs gain credibility by reporting reduced exposure on revenue-critical systems rather than counts of open vulnerabilities.
Drawing on Y2K, she calls for prioritizing remediation by business impact, aligning security with business lines, using AI defensively and offensively, and making resilience the focus for 2027.