2026 - Why Vulnerability MTTR Alone Misleads: Add MOVA to Measure Real Risk
2026 - Why Vulnerability MTTR Alone Misleads: Add MOVA to Measure Real Risk.
Summary
Overview: Mean Time to Remediate (MTTR) can mislead: when teams finally fix older vulnerabilities, MTTR spikes even though exposure has dropped. This talk introduces Mean Open Vulnerability Age (MOVA), which measures the average age of currently open vulnerabilities to reveal true backlog risk. A reproduci…
Related talks
Videos·18 min
Tayyaba Nafees
Tayyaba Nafees investigates Lightning Talk: Vulnerability Anti-Pattern.
Videos·43 min
Industry experts analyze emerging threats surrounding Vulnerability and Misconfiguration Informed Defense.
Black Hat·44 min
Daniel Cuthbert · Kelly Jackson Higgins · Marina Krotofil · Federico Maggi
Presenters detail vulnerability discovery and exploitation in From Coordinated Disclosure to Cooperative Vulnerability When Dealing w/ Critical Software Stacks.