Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Lisa Bilawski
The Real Jump Scare Isn’t the Attacker; It’s The Vulnerabilities You’re Focusing On
This post first appeared on the Qualys blog. Lisa Bilawski, Risk Operations Center, Qualys October is here, bringing a chill in the air, spooky decorations, and, fittingly, Cybersecurity Awareness Month. It’s a timely reminder for security leaders to revisit and strengthen their strategy. The past 12 months alone show how cyber threats are getting smarter and faster. There’s a haunting paradox that should be top of mind. Security teams are doing more vulnerability remediation than ever before.
The Real Jump Scare Isn’t the Attacker; It’s The Vulnerabilities You’re Focusing On
Key Takeaways Teams are remediating more than ever, but exposure from the vulnerabilities that matter is still rising faster than they can keep up with. Mean time to exploitation is about −7 days. Mean time to remediate sits around +30 days. Qualys research: closures rose from 73M (2022) to 473M (2025) – 6× – while critical findings still open at day seven rose from 56% to 63%. Less than 1% of vulnerabilities are actively exploited. A volume-and-CVSS program spends most of its effort on the rest.
Stop Chasing Threats: Top 3 Insights from the SANS Attack Surface Management Survey
Executive Summary The 2025 SANS ASM Survey highlights a clear shift in cybersecurity operations. Organizations are moving beyond fragmented, alert-driven security approaches toward unified, automated, and business-aligned risk operations. Continuous visibility, intelligent automation, and business-contextual prioritization are becoming essential for managing modern attack surfaces at scale.
ROC vs CTEM: What’s the Difference?
What is a ROC? A risk operations center (ROC) is a centralized command hub that unifies cyber risk management across security, IT, and compliance. It uses agentic AI to provide a real-time view of business risk, prioritize what matters, and then automate remediation. What is CTEM? Continuous threat exposure management (CTEM) is a clear framework for scoping, discovering, and prioritizing exposures.
The Essential Capabilities of a DSPM Solution
Originally published by Laminar. Written by Lisa Bilawski, Director of Content Marketing, Laminar. There’s been a worldwide shift from on-premises to cloud storage and a boom in data democratization (making data accessible and usable across the entire organization).
Laminar Selected for Prestigious AWS Built-In Competency
Laminar is excited to announce that we are joining forces with Amazon Web Services (AWS) AGAIN to continue our “better together story”! Today, at AWS re:Inforce, AWS announced its new AWS Built-in Competency, which was awarded to only 10 ISV Partners, including Laminar. We are proud to be the only data security start-up selected for the launch of this prestigious program. The AWS built-in co-build solution integrates AWS foundational services with Laminar’s data security platform.
Top Cloud Data Security Statistics for 2023
Exponential data proliferation The sheer volume of data that businesses are creating, consuming, and analyzing has grown exponentially, making the cloud a very tempting target for threat actors. Security teams are struggling to adapt, partly for lack of tools and because of the massive, worldwide shortage of skilled cybersecurity professionals.
Top Cloud Data Security Statistics in 2023
With the mass adoption of the cloud, businesses of all sizes and industries gained access to the vast amounts of data generated by their own operations, their customers, and the market at large. This widespread cloud transformation set the stage for great innovation and growth, but it has also significantly increased the associated risks and complexity of data security, especially the protection of sensitive data.
CyCognito’s 2022 Cyber Security Predictions
Once again, the season of cyber security predictions is back upon us. This year we come with a collection of predictions from a selection of experts to provide a glimpse of what is coming in 2022. 2020 was a whirlwind of changes to adapt to a unique biological threat. This forced an evolution in how businesses operated, moving more into the cloud and pushing rapid adoption of remote work.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Lisa
Contact Lisa, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack