From Exposure to Exploitation: How AI Collapses Your Response Window

According to The Hacker News, AI-powered adversarial systems can locate over-permissioned cloud workloads within minutes, map identity relationships, and move toward execution before security teams finish their morning coffee. AI compresses reconnaissance, simulation and prioritisation into a single automated sequence, allowing the exposure you created this morning to be modelled and positioned inside a viable attack path before lunch.

The piece notes that in 2025, over 32% of vulnerabilities were exploited on or before the day the CVE was issued, while AI-powered scan activity reached 36,000 scans per second, though only about 0.47% of identified issues are exploitable. It highlights scenarios where AI accelerates attacks and creates a new attack surface, including identity sprawl of machine identities at a ratio of 82 to 1 and a phishing surge of 1,265%.

The article also discusses how defenders should shift to Continuous Threat Exposure Management (CTEM) to focus on convergence points where multiple exposures intersect. It closes with a call to reclaim the window of exploitation by closing paths faster than AI can compute them, a perspective framed by the contributor Erez Hasson from XM Cyber.