AI shrinks vulnerability exploitation window to hours

Oh, marvellous — AI has discovered that the best way to prove its utility is to turn cybersecurity into a speedrun. According to Synack's 2025 report, the gap between vulnerability disclosure and exploitation has shrunk to mere hours, because nothing says 'progress' like attackers having AI that can weaponise a flaw before your coffee goes cold. Meanwhile, defenders have heroically reduced their mean time to remediation by 47% — which sounds impressive until you realise that an hour-long window means the bad guys have already ransacked the place.

The report, helpfully titled 'AI-Driven Vulnerability Trends,' reveals that adversarial AI is now automating the entire exploit chain — from scanning to payload delivery — faster than most organisations can patch. Synack's data shows that the average vulnerability now has an effective lifetime shorter than a British summer, yet somehow the security industry is framing this as a efficiency win. The 47% remediation improvement is real, but it's the desperate thrashing of a system designed for a pre-AI era, now forced to play whack-a-mole with an opponent that never sleeps.

And of course, the response from the cyber insurance and consulting sectors will be to sell more 'AI-powered defence' products that will, in turn, accelerate the arms race. The C-suite will nod sagely, approve bigger budgets, and the cycle continues until every zero-day is exploited before it's even disclosed. But cheer up — at least the mean time to remediation is improving. That's the kind of silver lining you can frame on a wall while the hackers take everything else.