Claude Mythos autonomously discovered thousands of zero days without human direction. Engineers with no security training could prompt it to find RCE vulns, go to sleep, and wake up to working exploits. OpenAI followed with GPT-5.4 Cyber days later.
The volume of discovered CVEs is about to explode. Meanwhile orgs can only patch about 10% of open vulnerabilities. That math was already broken. AI just made it unsolvable.
You cannot patch your way out of this one. The only possible approach here is reducing the number of exploitable assets as much as possible. Fewer dependencies, fewer packages, less code.
Anything else comes to mind?
Click to Open Code Editor