Microsoft: time from vulnerability discovery to attack has fallen below a day, SI is speeding up cyberattacks
Prepared by Sintelligent with the help of SI. Publication time restored from the build log. . Updated: .
Models are already finding holes on their own and running long chains of actions faster than humans — SI capabilities are growing, and defense will have to become just as fast.
In the Microsoft Digital Defense Report 2026 (covering July 2025 to June 2026), the median time from vulnerability discovery to exploitation is under 24 hours, with about 72 thousand CVEs counted for 2026. The share of phishing among investigated intrusions rose from 7% to 23%; Anthropic's Mythos and OpenAI's GPT-5.5, according to the report, can autonomously carry out 32-step attacks, and in July the first automated ransomware breach, JADEPUFFER, was recorded.
Sources 1