In a nutshell: As zero-days and AI-generated exploits emerge faster than patches can be deployed, the decisive control lies in network segmentation rather than the patch race.
A webinar with HD Moore, the inventor of Metasploit, addresses the assumption of inevitable security breaches. Moore argues that the classical patch strategy has failed, and security leaders must instead view their network architecture as the first line of defense.
The “assume breach” approach assumes that it is not possible to close vulnerabilities faster than attackers can exploit them. With the emergence of AI-powered exploit development, this problem intensifies: the time between discovering a vulnerability and its exploitation continues to shorten, while organizational patch cycles cannot keep pace with this speed.
HD Moore, creator of the Metasploit penetration testing framework, shifts the focus away from the hope of patching all bugs in time. Instead, he emphasizes that CISOs possess actual control in network topology and segmentation: which systems and data a bug can reach after gaining entry can be controlled through architectural decisions, not which bug penetrates. This is a question of network topology, and many teams have misconfigured this topology.
For security leaders, this means a shift in prioritization: instead of hoping for perfect defense, minimizing blast radius through microsegmentation, zero-trust network architecture, and precise access controls becomes central. The webinar is aimed at organizations that want to reorient their defensive strategy from pure vulnerability remediation to restricting lateral movement across the network.
Source: thehackernews.com · Published June 3, 2026
Lumi AI News — AI-assisted curation pursuant to Article 50 EU AI Act. Paraphrasing and classification by Lumi News Pipeline v1.2.9.