Definition
The shortening of the time between a vulnerability being publicly disclosed and a working exploit being developed, driven by AI models that can analyse patch differences and generate attack code in minutes. A task that once took skilled hackers days or weeks can now be completed by an AI in under an hour.
Why it matters
Security teams have historically relied on the days or weeks it takes attackers to weaponise a known vulnerability as a window to deploy patches. AI has effectively closed that window—making rapid patching and the three-day federal patch deadlines in CISA BOD 26-04 a practical necessity rather than a stretch goal.