Microsoft: attackers are ahead of defenders in early AI race

Microsoft's 2026 Digital Defense Report says cyberattackers are benefiting from AI faster than defenders, speeding up vulnerability discovery, malware development and post-compromise activity. The median time from vulnerability discovery to weaponization has fallen below 24 hours, and known-but-unpatched flaws are expected to spike for years.

• Median time from vulnerability discovery to weaponization is under 24 hours
• AI cuts the attack chain from days to seconds for sophisticated actors
• North Korean and Russian hackers use AI and "vibe coding" tooling
• Most observed campaigns still retain human direction