"Exploit mitigation" stalled around 2008. The attacks didn't.
Summary
Exploit mitigation techniques have largely stagnated since around 2008, despite ongoing advancements in attack methods. The article explores why this stagnation occurred and describes what a modern, default-on mitigation layer might entail.
IFF Assessment
FOE
The article highlights the persistent and evolving nature of cyberattacks, which have outpaced defensive mitigation strategies, posing an ongoing threat to defenders.
Defender Context
Defenders need to be aware that established exploit mitigation techniques may not be sufficient against modern threats, especially with the advent of AI accelerating exploit development. The article suggests a need for more robust and updated default mitigation layers on endpoints to counter these evolving attacks.