)
)
)
Summary
AI has collapsed the time between a patch release and a working exploit to under an hour, which breaks detection-and-response models built for human-speed attacks. Dmitri Alperovitch, co-founder and former CTO of CrowdStrike and Automox board chairman, coined the 1-10-60 benchmark at CrowdStrike: detect in one minute, investigate in ten, remediate in 60. He says it is no longer fast enough, and that defenders have to return to prevention. Automox CTO and CISO Jason Kikta says the default should flip toward patching by default and finding reasons to back off, with risk-limiting controls like parallel patch rings. The pressure comes from LLMs that auto-generate fuzzing harnesses and make intuitive leaps across similar code paths, narrowing an edge once held by a few hundred elite exploit researchers.
)
)
)
)