<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Risk Management on Vivian@SecMomBag</title><link>https://vvnblog.com/en/tags/risk-management/</link><description>Recent content in Risk Management on Vivian@SecMomBag</description><generator>Hugo -- gohugo.io</generator><language>en</language><copyright>Copyright © 2026 Vivian All Rights Reserved.</copyright><lastBuildDate>Sun, 25 Oct 2026 00:00:00 +0800</lastBuildDate><atom:link href="https://vvnblog.com/en/tags/risk-management/index.xml" rel="self" type="application/rss+xml"/><item><title>Patch and Detection Gaps Under AI-Automated Attacks: Rethinking Defense Workflows Through 2026's Vulnerabilities and Breaches</title><link>https://vvnblog.com/en/posts/ai-attack-time-gap/</link><pubDate>Sun, 25 Oct 2026 00:00:00 +0800</pubDate><guid>https://vvnblog.com/en/posts/ai-attack-time-gap/</guid><description>PHP2Shell was being exploited before a patch existed, and AI-automated attacks went from targeting to privileged access in under 3 hours more than once. Are your patch schedule and alert handling still measured in weeks and months? This month&amp;rsquo;s vulnerabilities and breaches show two gaps, the patch gap and the detection gap, and which decisions belong in policy, signed off by management in advance.</description></item></channel></rss>