Risky Business · Friday, August 14, 2026
Adam Ponting discusses the alarming trend of shrinking timeframes between the disclosure of vulnerabilities (CVEs) and their exploitation in the wild. He cites a 'zero-day clock' showing this window has reduced significantly, with same-day exploits becoming common and predicted to decrease to minutes in the near future due to AI.
“And that time has been coming down for 20 years. And now it's like, kind of hilariously small, scarily small, same day, uh, and like predicted to be within minutes next year, 2027.”
“And that's just the proliferation of AI, reversing a patch, you know, taking the CVE, developing an exploit and then it running around wild.”
“It's, same day is pretty scary and minutes next year is out of control.”