Cybersecurity in the Age of AI - Inquirer Technology
October 2026 has delivered a cluster of critical security disclosures, including flaws in foundational internet infrastructure, prompting industry leaders to warn of a new era of AI-accelerated cyber threats.
The era of simply patching and hoping for the best is ending.
Industry experts are using terms like 'Black October' and the 'Vulnpocalypse' to describe a surge in critical security flaws, including those in foundational internet infrastructure.
The speed of discovery is outpacing the ability to fix these issues, with exploitation windows shrinking from weeks to mere hours.
The problem is not just about finding bugs, but about the nature of the threat itself.
Former NSA cybersecurity director Rob Joyce describes a shift from a 'vulnpocalypse' to a 'breachpocalypse'.
In this new phase, AI agents can continuously probe every potential entry point, a task that human defenders cannot match, especially on legacy and unsupported systems.
AI agents can jiggle every doorknob, continuously, while humans cannot keep up.
Defensive recommendations
Current advice for developers focuses on triage and isolation.
The primary recommendations are to prioritize patching internet-facing and critical systems, be ready to take systems offline if they cannot be patched quickly, and isolate what remains unpatchable.
Continuous auditing with AI is also suggested as a necessary step.
However, experts warn that these measures are insufficient to address the scale of the new threat.
Deputy CISO at Anthropic, Jason Clinton, warns of a 'vulnerability tsunami' that will get much worse before it improves.
Things will get much worse before they improve.
A new security model
To truly address the problem, a fundamental change to the internet's design is proposed.
The article argues that the current assumption that publicly exposed systems accept requests from unknown actors is no longer viable.
A new model is suggested that moves away from 'access by default' and 'identity as an account'.
Instead, the proposal is for users to control their own digital identities and authority.
This would mean that an unknown actor should not be able to interact with protected functionality without first establishing trust.
The goal is to build systems where users retain control and face accountability for their actions.
The path forward
The article concludes that the industry must prepare for a forced rebuild of internet systems.
This rebuild should focus on making every consequence manageable and resilient in case of a breach.
The challenge is to make the digital environment increasingly adversarial yet still secure and accountable.
The transition period, which may last 18 months, will require a shift from defensive patching to building fundamentally new security architectures.
Related
