
For two decades, the answer to most security problems has been to patch faster. AI is breaking that model. Exploitation timelines have shrunk from days to hours, zero-days now account for a growing proportion of attacks, and many AI-related risks have no patch at all. In this session, we’ll explore how attackers are using AI to accelerate reconnaissance, exploit discovery, malware development and ransomware operations, while organisations face growing exposure from shadow AI, over-privileged agents and AI infrastructure. Drawing on real-world examples, we’ll examine why security teams should focus on mean time to mitigate rather than mean time to patch, and share practical strategies for rapid containment, resilience and reducing AI-driven risk.