Standard 90-day vulnerability disclosure policy is likely dead thanks to AI, expert warns that AI can weaponize patches in 30 minutes — LLM-assisted bug-hunting ushers in a new cyberworld order
The traditional 90-day vulnerability disclosure policy is becoming obsolete due to AI's rapid bug-hunting capabilities. Security researchers are warning that AI can identify and even weaponize software flaws in a matter of minutes, drastically shortening the window for fixes. This acceleration means that developers must treat critical security issues as P0 and address them immediately, as exploits are likely already in the wild before patches can be deployed. AI
IMPACT Accelerates the discovery and exploitation of software vulnerabilities, forcing immediate patching and potentially rendering traditional disclosure timelines obsolete.
