Infosecurity Europe: Patch Responsibility Remains Up for Grabs as AI Unearths Decades of Flaws

The article examines how advances in AI are accelerating exploit development and shortening the time between patch release and active exploitation, prompting faster patching expectations (e.g., India’s 12-hour requirement). It contrasts regulatory approaches — the EU’s producer-centric Cyber Resilience Act, India’s speed-first mandate, and the US market-driven model — and urges organizations to adopt exploit-intelligence-driven patching, automation, stronger hardening (segmentation, runtime protections), improved disclosure workflows, and supply-chain mitigations such as locking down developer environments and package signing.