The Patch Gap Is Structural. Here Is What That Means for Your SOC.

This practitioner-oriented analysis argues that Anthropic's Project Glasswing and similar AI-driven vulnerability discovery capabilities represent a structural change in the threat environment: they can surface thousands of previously unknown and chainable flaws while existing patching and triage ecosystems remain unable to scale, leaving a narrowing but non-zero window for exploitation. The author emphasizes that fewer than one percent of discovered issues were patched at announcement, legacy/unmanaged assets and slow mean-time-to-patch exacerbate risk, and that effective defense requires continuous monitoring and rapid detection rather than reliance on timely patching alone.