Follow us on Google News
Nearly 90% of Australian organisations have experienced a security incident, suspected attack or near miss linked to delayed software updates, according to a new cybersecurity study.
The findings reveal a widening gap between the speed at which hackers can exploit vulnerabilities using artificial intelligence and the time businesses require to install security patches.
The 2026 AI Vulnerability Gap Report, based on responses from 200 Australian cybersecurity leaders, found that 57% of organisations had experienced at least one confirmed incident associated with slow patching.
The findings raise concerns about whether existing security practices can keep pace with increasingly automated cyberattacks.
How Is AI Making Cyberattacks Faster?
Artificial intelligence is changing how quickly cybercriminals can identify and exploit weaknesses in computer systems. AI-powered tools can analyse newly disclosed vulnerabilities and help attackers develop methods to exploit them, reducing the time available for organisations to respond.
https://the420.in/fcrf-certified-chief-ai-officer-second-cohort-november-2026/
The survey found that 51% of Australian cybersecurity leaders believe AI-assisted attackers can develop a working exploit within one to three days of a critical vulnerability being disclosed. Another 7% believe exploitation could become possible in less than 24 hours. This creates a difficult situation for businesses that depend on traditional security testing and approval procedures before applying updates.
Researchers warned that the shrinking period between vulnerability disclosure and potential exploitation could leave organisations exposed even when fixes are available.
Why Are Companies Taking Longer to Patch?
The findings reveal significant delays in how Australian businesses deploy security updates. Approximately 45% of respondents said their organisations typically require four to six days to install a critical patch across production systems, while 15% reported taking up to a week. Testing was identified as a major contributor to delays, with 42% saying it adds four to six days to the patching process. Another 30% reported testing periods lasting up to three weeks.
The study also identified weaknesses in policies covering less serious vulnerabilities. Only 33% of organisations required non-critical security patches to be applied within a defined period, while 32% relied on a best-effort approach. Another 14% reported having no formal patching policy. These findings suggest that organisations may struggle to address vulnerabilities systematically, particularly when security teams must balance testing requirements with operational demands.
What Does This Mean for Cybersecurity?
The research indicates that traditional vulnerability management procedures may be increasingly difficult to maintain as AI reduces the time attackers need to develop exploits.
A separate survey involving 300 US cybersecurity leaders revealed similar concerns. Around 85% reported incidents or near misses linked to delayed patching, while 69% believed AI-assisted attackers could develop exploits within three days or less.
The findings also follow an October OpenJDK update addressing 53 vulnerabilities, the highest number reported in a single update in more than a decade.
The growing pressure on organisations highlights the importance of reviewing patch management procedures, maintaining clear deadlines and reducing unnecessary delays. As AI-assisted attacks become faster, businesses face increasing pressure to close security gaps before criminals can exploit them.
About the author — Ayesha Aayat writes on cybercrime, digital safety, and emerging online threats. Her work focuses on public awareness, legal clarity, and technology-driven risks.
Click Here For The Original Source.
——————————————————–
