[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f3tFahl-OJsFXVh_TQaRnJNNV0ZO3O9cuy_NApNEBXZc":3},{"article":4,"iocs":54,"watch_terms":61,"solutions":62,"lesson":157},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"fcb5c9e9-3d12-4452-a9f4-9640884c0ac9","AI Didn’t Create a New Kind of Risk. It Removed the Time You Had to Fix the Old One.","ai-didn-t-create-a-new-kind-of-risk-it-removed-the-time-you-had-to-fix-the-old-o-c862fe","Mandiant’s AI Risk and Resilience 2026 report shows attackers putting agentic AI to work across the intrusion. Vulnerability exploitation is still the leading way in, and the window to fix it is closing. Executive Summary Mandiant and Google Threat Intelligence Group (GTIG) published AI Risk and Resilience 2026 in September. Attackers now use agentic AI […]","Mandiant's AI Risk and Resilience 2026 report indicates attackers are leveraging agentic AI for reconnaissance and vulnerability validation, significantly accelerating the exploitation process. While vulnerability exploitation remains the primary entry vector, the mean time to exploit has dropped to an estimated minus seven days, necessitating machine-speed defense mechanisms. The report also highlights that AI infrastructure itself is becoming a target, with autonomous agents gaining unauthorized access.","Attackers use agentic AI for faster exploitation, shrinking the window for defense.","https:\u002F\u002Fblog.qualys.com\u002Fproduct-tech\u002F2026\u002F11\u002F12\u002Fai-didnt-create-a-new-kind-of-risk-it-removed-the-time-you-had-to-fix-the-old-one","https:\u002F\u002Fblog.qualys.com\u002Fwp-content\u002Fuploads\u002F2026\u002F11\u002Fcropped-1.png","2026-11-13T01:37:30+00:00","2026-11-13T02:00:26.031107+00:00",8,[17,20,22,25,27,29],{"name":18,"type":19},"Mandiant","vendor",{"name":21,"type":19},"Google",{"name":23,"type":24},"AI","technology",{"name":26,"type":24},"agentic AI",{"name":28,"type":24},"Kubernetes",{"name":30,"type":24},"CI\u002FCD","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":31,"icon":33,"name":34,"slug":35},null,"Threat Intelligence","threat-intelligence",[37,42,47,52],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":43},{"id":44,"icon":33,"name":45,"slug":46},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":48},{"id":49,"icon":33,"name":50,"slug":51},"c5eccf7c-abbc-4bd3-bbed-e6da5cba8e73","Incident Response","incident-response",{"category":53},{"id":31,"icon":33,"name":34,"slug":35},[55,59],{"type":56,"value":57,"context":58},"malware","Hexstrike","Agentic attack tooling used for reconnaissance, vulnerability validation, and credential harvesting.",{"type":56,"value":60,"context":58},"Strix",[21,18],{"controls":63,"vendors":151},[64,93,122],{"slug":65,"name":66,"problem":67,"products":68},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[69,77,85],{"vendor_slug":70,"vendor_name":71,"vendor_logo":72,"product_slug":73,"product_name":74,"url":75,"description":76},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":78,"vendor_name":79,"vendor_logo":80,"product_slug":81,"product_name":82,"url":83,"description":84},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":86,"vendor_name":87,"vendor_logo":88,"product_slug":89,"product_name":90,"url":91,"description":92},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"slug":94,"name":95,"problem":96,"products":97},"patch-management","Automated patch management","Known holes get closed in days, not months.",[98,106,114],{"vendor_slug":99,"vendor_name":100,"vendor_logo":101,"product_slug":102,"product_name":103,"url":104,"description":105},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":107,"vendor_name":108,"vendor_logo":109,"product_slug":110,"product_name":111,"url":112,"description":113},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":115,"vendor_name":116,"vendor_logo":117,"product_slug":118,"product_name":119,"url":120,"description":121},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"slug":123,"name":124,"problem":125,"products":126},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[127,135,143],{"vendor_slug":128,"vendor_name":129,"vendor_logo":130,"product_slug":131,"product_name":132,"url":133,"description":134},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",{"vendor_slug":136,"vendor_name":137,"vendor_logo":138,"product_slug":139,"product_name":140,"url":141,"description":142},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-insight-xdr","Falcon Insight XDR","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fendpoint-security\u002Ffalcon-insight-xdr\u002F","Endpoint detection and response with extended detection across other security tools.",{"vendor_slug":144,"vendor_name":145,"vendor_logo":146,"product_slug":147,"product_name":148,"url":149,"description":150},"sentinelone","SentinelOne","\u002Fvendor-logos\u002Fsentinelone.png","singularity-endpoint","Singularity Endpoint","https:\u002F\u002Fwww.sentinelone.com\u002Fplatform\u002Fendpoint-security\u002F","Endpoint protection and detection with automated response and rollback.",[152],{"slug":153,"name":21,"logo_path":154,"roles":155},"google","\u002Fvendor-logos\u002Fgoogle.png",[156],"reported_by",{"slug":158,"title":159,"body":160,"framework_refs":161,"framework_notes":167},"ai-accelerated-exploitation-has-eliminated-the-patching-grace-period","AI-Accelerated Exploitation Has Eliminated the Patching Grace Period","Attackers are now deploying agentic AI to automate reconnaissance and vulnerability validation, compressing the mean time to exploit to below zero — meaning exploits can appear before defenders have even finished assessing a disclosed vulnerability. This fundamentally invalidates traditional patch cycles that assumed days or weeks of reaction time between disclosure and active exploitation. The same AI infrastructure organizations are adopting to improve security is itself becoming an attack surface, with autonomous agents being leveraged to gain unauthorized access. Organizations that rely on manual, periodic patching processes are now structurally unable to keep pace with machine-speed adversaries. The lesson is clear: defense must operate at the same velocity as the threat.",[162,163,164,165,166],"CIS Control 7: Continuous Vulnerability Management (v8)","NIST SP 800-53 SI-2: Flaw Remediation","NIST CSF 2.0 ID.RA-1: Asset Vulnerabilities Are Identified and Communicated","NIS2 Article 21(2)(e)","MITRE ATT&CK T1595: Active Scanning",{"NIS2 Article 21(2)(e)":168,"MITRE ATT&CK T1595: Active Scanning":169,"NIST SP 800-53 SI-2: Flaw Remediation":170,"CIS Control 7: Continuous Vulnerability Management (v8)":171,"NIST CSF 2.0 ID.RA-1: Asset Vulnerabilities Are Identified and Communicated":172},"NIS2 Article 21(2)(e) explicitly covers vulnerability handling and disclosure practices, requiring organizations to have processes capable of responding to vulnerabilities before or as exploits emerge.","Agentic AI is being used to automate active reconnaissance and vulnerability validation at scale, directly corresponding to this technique, which defenders must now detect and disrupt at machine speed.","SI-2 mandates that organizations identify, report, and correct flaws within defined time frames, which must now be compressed to hours given AI-accelerated exploitation timelines.","CIS Control 7 requires continuous, prioritized vulnerability scanning and rapid remediation — exactly the machine-speed patching cadence needed when mean time to exploit drops below zero.","This category requires ongoing identification of vulnerabilities across all assets, including emerging AI infrastructure that is now itself a targeted attack surface."]