In AI-driven cybersecurity, being the first to defend your systems or embed exploits gives a massive but temporary edge. This advantage diminishes quickly as others catch up, creating a "fierce urgency of now" for national security agencies to act before the window closes.

Investor Gilly Shwed predicts an imminent, dangerous gap where AI-driven threat actors operate at a speed and sophistication that human-led security teams cannot match. This transitional phase, before defensive AI can fully take over, poses an unprecedented risk to critical infrastructure.

As AI models become adept at finding software vulnerabilities, there's a limited time for companies to use these tools defensively. This brief "catch-up" period exists before these powerful capabilities become widely available to malicious actors, creating an urgent, time-boxed need for proactive patching of legacy systems.

Cybersecurity expert Gili Raanan highlights a critical risk: threat actors can adopt new AI tools much faster than large, slow-moving enterprises. This creates an asymmetric battlefield where defenders are outpaced, putting AI's power in the hands of bad actors first.

AI tools drastically accelerate an attacker's ability to find weaknesses, breach systems, and steal data. The attack window has shrunk from days to as little as 23 minutes, making traditional, human-led response times obsolete and demanding automated, near-instantaneous defense.

Details from an accidental leak reveal Anthropic's next model, Mythos, has "step change" capabilities in cybersecurity. The company warns this signals a new era where AI can exploit system flaws faster than human defenders can react, causing cybersecurity stocks to fall.

AI models are better at finding bad code than writing good code. This capability will rapidly uncover vulnerabilities in open-source, custom, and vendor software that would have otherwise taken 10 years to find. This creates an urgent, large-scale need for patching across all industries.

The traditional cybersecurity model of humans finding and patching vulnerabilities cannot keep pace with AI that discovers thousands of exploits in hours. This fundamental mismatch in speed and scale will require a complete overhaul of how software security is managed.

Previously, attackers spent weeks inside a system before striking. AI agents can now find and exploit vulnerabilities at machine speed, rendering traditional detection insufficient. The focus must now be on immediate recovery and resilience, assuming a breach has already occurred.