Đang tải bảng tin…
Security Boulevard0 Hot0 bình luận13 phút đọc
From Zero-Day to Zero-Hour: How AI Compresses the Vulnerability Lifecycle
AI has collapsed the traditional vulnerability lifecycle from months to hours. Anthropic's Claude Mythos Preview found thousands of zero-day vulnerabilities across major OSes and browsers in weeks, producing 181 working Firefox exploits. CrowdStrike's 2026 data shows attacker breakout times averaging 29 minutes, with AI-augmented attacks up 89% year-over-year. Small open models (3.6B parameters, $0.11/million tokens) can replicate these findings, democratizing attack capability. The cost per vulnerability has dropped from $20,000–$80,000 to $5–$50. Enterprises must rearchitect patch management into three tiers: same-day automated patching for low-risk systems, 72-hour targets for standard systems, and 7-day maximums for critical infrastructure. Compensating controls (RASP, WAF virtual patching, network segmentation, behavioral detection) are essential to cover the gap between disclosure and deployment.
Nguồn: https://securityboulevard.com/2026/07/from-zero-day-to-zero-hour-how-ai-compresses-the-vulnerability-lifecycle. 8sync News chỉ tóm tắt và dẫn link; bản quyền nội dung thuộc tác giả và nguồn gốc.
Đề xuất cho bạn
The Register54 Hot3 phútAI
GitHub AI agent leaks private repos when asked nicely
GitHub's AI agent có lỗ hổng bảo mật 'GitLost' cho phép rò rỉ dữ liệu private repository …
