Bottom line: AI is drastically shortening the time between vulnerability discovery and exploitation, which is why Horizon3.ai recommends shifting vulnerability management away from sheer CVE volume toward prioritized, demonstrably exploitable risks.
Artificial intelligence is accelerating vulnerability discovery and exploit development faster than many security teams can respond. Horizon3.ai advocates focusing vulnerability management more on actually exploitable risks rather than sheer CVE volume.
According to an analysis by Horizon3.ai, published on CSOonline, AI-assisted security research is exacerbating an existing problem: organizations are being flooded with vulnerability disclosures, threat intelligence feeds, exploit discussions and vendor advisories, even though only a small proportion of these vulnerabilities are ever actively exploited. Horizon3.ai’s Attack Team reportedly demonstrated how a critical vulnerability in Apache ActiveMQ could be identified and validated within minutes using AI. This significantly shortens the time span between the discovery of a flaw and its exploitation.
For CISOs, the real problem is shifting: the challenge is not a lack of visibility into vulnerabilities, but prioritization – determining which threat within their own environment actually poses an exploitable risk before attackers operationalize it at scale. The article describes a typical scenario: on a Tuesday morning, 30 vulnerabilities are disclosed, of which realistically only one is exploitable. Within hours, vendor advisories, KEV (Known Exploited Vulnerabilities) discussions and internal escalations spread throughout the company, while security teams must simultaneously determine which systems are affected, whether attackers can reach them, what mitigation options exist and how complex a patch would be – all while attackers are already scanning for exposed services or developing their own exploits.
Horizon3.ai points out that many organizations still rely on separate scanners, fragmented reports, manual coordination between teams and incomplete visibility into exposed assets. According to the vendor, its own product, “Rapid Response,” is designed to help validate exposure, prioritize action, verify fixes and reduce uncertainty around emerging threats, with the Attack Team continuously assessing vulnerabilities based on real attacker interest, prevalence, accessibility, exploitability and the likelihood of widespread operationalization.
For security leaders, the article identifies five key questions that must be answered quickly under time pressure: Are we actually exposed, which assets are affected, what measures eliminate the risk, did mitigation and remediation actually work, and can risk reduction be demonstrated to leadership. The article argues that additional feeds or alerts alone cannot answer these questions – what is needed are more reliable, curated signals that reduce noise and counteract response fatigue in security teams.
Source: www.csoonline.com · Published August 6, 2026
Lumi AI News — AI-assisted curation pursuant to Art. 50 EU AI Act. Paraphrasing and classification by Lumi News Pipeline v1.8.3.