**Vulnerability Management in the Age of AI**

Vulnerability management was designed for software written by people, shipped on a schedule, and tracked in a spreadsheet. That assumption no longer holds. Frontier models now discover flaws, write working exploits, and do it at a speed and volume no triage queue was built to absorb. The same models can read a codebase, propose a fix, and open the pull request, which raises a harder question – how much remediation are you willing to hand over, and what breaks when you do? Add agents and machine identities that no CVE feed covers, and the old model stops working. This session looks at what vulnerability management should become when both attack and repair run at machine speed in this age of Artificial Intelligence (AI).

Speaker bio:

Megan Elliot | Director, Cloud Security Engineering; Elliot Security Intelligence Consulting

Chandan Reddy Bokka is a Senior Manager in Deloitte Risk and Financial Advisory. He has spent 12 years securing digital identity and cloud infrastructure for public sector and enterprise clients. He built the first and largest FIDO passwordless system in the U.S. public sector, a 2024 national award finalist, and directed an identity modernization program for one of the largest States. He also has extensive experience in vulnerability & risk management for cloud-native environments, threat modeling before production, CVSS scoring, SBOM supply chain checks in the build pipeline, and an AI-driven DevSecOps pipeline that cut mean time to detect. His current work covers AI agents, non-human identity, and the move to post-quantum cryptography. CISSP and CCSP certified, with MIT xPRO training in quantum computing.