73 Seconds to Breach, 24 Hours to Patch: The Case for Autonomous Validation
Anthropic's Mythos AI model discovered 181 Firefox exploits in 14 days; CVE-to-exploit window now ~10 hours.
A Picus Security analysis highlights the acceleration of cyber threats in 2026: Anthropic's Mythos AI model identified 181 working Firefox exploits and thousands of zero-days (99% still unpatched) during a gated preview, while AWS documented a single operator using AI to compromise 2,516 FortiGate devices across 106 countries in minutes. The median time from CVE publication to working exploit has collapsed from 56 days (2024) to approximately 10 hours (2026), rendering traditional vulnerability management assumptions obsolete and underscoring the need for autonomous validation and faster response mechanisms.
AI summary of the linked source. Not reviewed by an editor. How this works
Run AWS?
Get an email when a new story names AWS, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
What helps against this
How we list vendors
- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Automated patch management
Known holes get closed in days, not months.
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.