India's cyber agency sets clock at 12 hours to tackle exploited bugs as AI turns up the heat

CERT-In has issued guidance urging defenders to patch, mitigate, or remove exposure for known-exploited internet-facing and critical "crown jewel" vulnerabilities within 12 hours (24 hours for some internal critical flaws), driven by concerns that AI and agentic tools are speeding up discovery and exploitation. The report emphasizes temporary mitigations (isolation, access restrictions) as a pragmatic immediate response and calls for organizations to adopt continuous, faster defensive postures across business functions.