Nucleussec shares GigaOm VM webinar
- Nucleus Security shared a webinar on May 18 featuring GigaOm’s Chris Ray and Nucleus CTO Will Gorman on AI’s role in vulnerability management. - Chris Ray and Will Gorman said AI helps triage, prioritization and workflow automation, but the webinar warned it can amplify bad data. - On June 2, Cytidel will pitch in Infosecurity Europe’s startup competition at ExCeL London before judges including Shlomo Kramer.
Nucleus Security on May 18 promoted a webinar featuring GigaOm Field CTO Chris Ray and Nucleus CTO Will Gorman on how artificial intelligence fits into vulnerability and exposure management workflows. The session, titled “Why AI Features Don’t Equal Better Vulnerability Management,” was posted on Nucleus channels and framed AI as useful in specific tasks rather than as a replacement for security teams. The discussion centered on prioritization, triage and workflow automation, according to the webinar description. It also warned that AI can fall short when it amplifies bad data, obscures ownership or masks weak execution. ### What did Nucleus and GigaOm actually put out? The webinar “Why AI Features Don’t Equal Better Vulnerability Management” was published about two months ago on Nucleus Security’s YouTube channel and remains listed in the company’s webinar library. Nucleus described it as a conversation on industry trends and vulnerability management practices with company experts and guests. (youtube.com) Chris Ray is identified in the webinar listing as Field CTO at GigaOm, and Will Gorman is identified as CTO and leader of AI initiatives at Nucleus Security. The video description says the pair “challenge the assumption that more AI automatically leads to better outcomes.” ### Where did the speakers say AI helps most? The webinar description says the discussion focused on “practical use cases like prioritization, triage, and workflow automation.” Those are the clearest functions Nucleus and GigaOm highlighted as areas where AI can improve vulnerability and exposure management work. (youtube.com) At the same time, the posted description does not present AI as a full substitute for human decision-making. (youtube.com) Instead, it describes AI as improving certain parts of the process while also carrying operational risks if underlying data or execution is weak. ### What limits did the webinar spell out? The video description names three failure modes directly: “amplifying bad data, obscuring ownership, or masking weak execution.” Those points align with a narrower view of AI in security operations — one in which automation can speed work but can also make poor inputs or unclear accountability harder to detect. (youtube.com) Nucleus also broke out the session into segments including “AI Hype vs. (youtube.com) Risk Reduction,” “Where AI Actually Delivers,” “The Illusion of Progress,” “Evaluating AI Claims,” and “AI Isn’t Your Strategy.” Those chapter labels show the company and its guest were drawing a line between product marketing around AI and measurable risk reduction. ### How does this fit the broader vulnerability management market? (youtube.com) Infosecurity Europe 2026 will host a new Cyber Startup competition on Tuesday, June 2, at ExCeL London, where five startups will pitch live to judges, investors and buyers. One of the finalists is Cytidel, which Infosecurity Magazine described as a vulnerability intelligence platform that adds a real-time intelligence layer between security tooling and decision-making. (youtube.com) Shlomo Kramer is listed as a judge for that competition, alongside Close Brothers Group CISO Mun Valiji and CFC Group CISO Kirsty Kelly. Infosecurity Magazine said Kramer is a founder and investor associated with companies including Check Point, Palo Alto Networks and Imperva. ### What happens next? June 2 is the next concrete date in this story. (infosecurity-magazine.com) Infosecurity Europe says finalists in its Cyber Startup Award will pitch that afternoon, with the winner announced the same day and finalists returning for a featured speaking slot on June 3. (infosecurityeurope.com)