Current threat and vulnerability management has proven to be ineffective. Old vulnerabilities continue to be exploited, as shown in a majority of recent breaches. Security and risk management leaders should use emerging approaches to improve detection and remediation of attacks on vulnerabilities.