Companies need to overhaul cybersecurity as AI accelerates vulnerability attacks: Report - The Economic Times

The report highlights that the shrinking window between vulnerability disclosure and active exploitation is leaving organisations increasingly exposed.

By 2026, around two-thirds of exploited vulnerabilities were being used on the day of disclosure, compared to a few weeks as recently as a year ago.

The median time taken by organisations to fully remediate vulnerabilities increased from 32 days to 43 days, with only 26 per cent of vulnerabilities fully fixed.

AI accelerates vulnerability discovery

Traditional cybersecurity practices are becoming inadequate as advanced AI models can identify software vulnerabilities at unprecedented speed and scale.

Findings from Anthropic's Project Glasswing show that partners identified more than 10,000 high- or critical-severity vulnerabilities using Claude Mythos Preview, with some reporting bug-finding rates increased more than tenfold.

Attackers are moving faster, with the average time between the disclosure of a critical vulnerability and active exploitation now just a matter of hours, compared to a few weeks as recently as a year ago.

New security framework recommended

Organisations must simultaneously strengthen four areas: cybersecurity practices, operating models, risk and control frameworks, and technology.

The report suggests establishing clear accountability for software vulnerabilities, strengthening identity and access controls, regularly monitoring third-party suppliers, and introducing secure development practices.

Companies should begin implementing the new security framework over an initial 90-day period, starting with critical systems and expanding based on measurable improvements.

At a time when flaws are being found and risk is being weaponized at unprecedented levels, that kind of digital resilience could prove to be a long-term competitive advantage.