AI shrinks vulnerability exploitation window to hours

A new report from Synack, a cybersecurity firm, details how artificial intelligence is accelerating both vulnerability exploitation and remediation. Synack's data is based on analysis of thousands of security tests conducted on its platform in 2025.

The report also notes that defenders improved their mean time to remediation by 47% over the same period. This improvement is attributed to the use of AI tools that automate patch deployment and prioritise critical vulnerabilities. Despite the faster remediation, the report emphasises that the gap between disclosure and exploitation has narrowed, creating a more dynamic threat landscape.

Synack's findings highlight the dual-use nature of AI in cybersecurity, where both attackers and defenders leverage automation. It also calls for closer collaboration between security researchers and software vendors to expedite the patching process.