AI-Fueled Threat Actors Outpace Defenders in Vulnerability Discovery

Threat actors are increasingly using AI to find vulnerabilities, build malware, and run intrusions faster than defenders can keep up. According to Microsoft's 2026 Digital Defense Report, attackers are collecting the benefits of AI first, while defenders struggle to close the gap.

The median time from vulnerability discovery in the wild to weaponization has dropped to well below 24 hours, with a record 72,000 CVEs tracked for 2026. This rapid pace means that remediation moves slower than discovery, leading to a multi-year period where known, unpatched vulnerabilities pile up.

AI also allows attackers to personalize phishing messages and get past language and skill barriers. In fact, phishing was the entry point for 23% of intrusions investigated by Microsoft's incident responders between July 2025 and June 2026, up from 7% a year earlier.