Can We Hire Our Way Out of the Remediation Problem?
Security Boulevard, Thursday, October 15th, 2026
Bank of America hired 1,000 contractors to fix flaws AI surfaced, raising the question of how remediation must change.
Bank of America brought in 1,000 contractors, on top of about 3,000 staff, to address vulnerabilities in its own and vendor code exposed by advanced models such as Anthropic's Mythos.
As discovery accelerates, the author asks how many people would ever be enough.
Remediation isn't the same as patching, because a patch won't fix excessive privileges, unneeded connections or architectural flaws, so the fix may be revoking access, removing software or isolating assets.
The piece highlights Qualys's AI-driven remediation that goes beyond patching and Aviatrix's segmentation to contain damage while flaws that can't be fixed immediately are addressed.