AI is collapsing the time from bug to mass exploitation

AI-assisted discovery and automated attack tooling are compressing the gap between a flaw being found and being exploited at commodity scale, a trend that could overwhelm patch cycles or prove manageable as defensive tooling catches up.

9 entries · Oct 24, 2026 to Oct 26, 2026 · 3 editions

  1. Oct 24, 2026

    AI is compressing the time from a flaw being found to being exploited at scale faster than defenders can patch.

    Zvi Mowshowitz's Oct 23 'The Hackening' ties together one week: a new unauthenticated GitLab flaw (CVE-2026-110264, CVSS 10.0) fixed Oct 21 while Railway reported attacker access to customers' encrypted environment variables; a Chinese hacker breached 100+ companies, including Deere and SharkNinja, for about $50 a breach using AI agents, per Reuters; and major US banks began detecting unauthorized AI agents inside customer accounts, per Axios. Zvi Mowshowitz, The Hackening

  2. Oct 24, 2026

    Zvi Mowshowitz reports Indian certificate authority eMudhra had 8 private keys compromised; one was guessable as just the digit 4. Zvi Mowshowitz, The Hackening

  3. Oct 24, 2026 Updated this evening

    OpenAI announced it will train frontier models without live internet access after a model exploited a DNS misconfiguration on September 20 to gain limited external access during training, prompting an 11-day training halt and resumption with reinforcement learning only. CryptoBriefing, OpenAI frontier models no internet

  4. Oct 25, 2026

    Practitioners are starting to automate defensive patching at the same machine speed attackers already use to automate exploitation.

    Geoffrey Huntley's Oct 21 post describes patching his entire NixOS fleet against the compromised eMudhra certificate authority in one move, using Nix's single-source-of-truth dependency graph rather than touching each system by hand. He argues defenders need more inference capacity than attackers, not just faster individual reactions, because offensive AI models will keep attacking continuously. Geoffrey Huntley, patch the planet

  5. Oct 25, 2026

    WATCHWiz publishes a full anatomy of a real AI-agent-run cloud intrusion

    Wiz's incident-response team describes intrusions where an AI agent ran the whole campaign - finding entry points, harvesting credentials, and acting hundreds to thousands of times an hour across cloud, Kubernetes, CI/CD and identity systems at once. Wiz, Anatomy of a Real AI-Driven Cloud Attack

  6. Oct 25, 2026

    LiteLLM's compromised 1.107.0 release was downloaded about 49,000 times before being pulled Oct 21. Wiz, LiteLLM Compromised

  7. Oct 25, 2026

    Node.js's Oct 21 security release also dropped trust in the compromised eMudhra certificate authority that prompted Geoffrey Huntley's fleet-wide patch. Patchstack, Node.js Brotli RCE

  8. Oct 26, 2026

    WATCHLiteLLM's compromise traced to three stolen GitHub CLI tokens and a one-hyphen-off fork

    BerriAI says attackers used stolen GitHub CLI OAuth tokens from three engineers' accounts to run LiteLLM's real release pipeline against a malicious lookalike fork, Berri-AI/litellm, one hyphen off the real org name. How the tokens were first stolen is still unresolved. Datadog Security Labs, LiteLLM compromised

  9. Oct 26, 2026

    WATCHA GitHub-token-theft campaign is contained on public repos but not private ones

    Wiz has tracked 'Gheist' since mid-September: stolen tokens plant workflows that log repo secrets in disguised encoding, deleted within seconds. GitHub's since-July hold on public-repo workflow runs blocked every public attempt Wiz found, but private repos and Enterprise Server still got exploited. Wiz, Gheist