Companies need to overhaul cybersecurity as AI accelerates vulnerability attacks: Report

Companies must fundamentally rethink their cybersecurity strategies and boost investments in automated threat detection and vulnerability management due to advanced artificial intelligence, warns a McKinsey report. The firm highlights that the time gap between vulnerability disclosure and exploitation has drastically reduced, making organizations more vulnerable if they don't adopt continuous security monitoring, quicker remediation, and stronger controls over AI systems.

According to McKinsey, over two-thirds of exploited vulnerabilities are now targeted on the day of discovery or earlier, with only 26 percent fully remediated by organizations, as per Verizon's 2026 Data Breach Investigations Report.

McKinsey emphasizes that traditional cybersecurity methods are no longer sufficient as AI models can pinpoint software weaknesses at an astonishing pace and scale. The report cites Anthropic's Project Glasswing, which utilized Claude Mythos Preview to uncover more than 10,000 high- or critical-severity vulnerabilities, with some partners reporting a tenfold increase in bug-finding rates.

McKinsey stresses that organizations need to enhance four key areas—cybersecurity practices, operating models, risk and control frameworks, and technology—rather than simply hiring more security staff or enhancing patching efforts. The report stresses that mere speed is insufficient to manage this challenge and stresses the necessity of an integrated security program that combines automated discovery, prioritization, containment, and human oversight.

The authors also recommend that businesses assign clear responsibility for software vulnerabilities, improve identity and access controls, consistently monitor third-party suppliers, and implement strong cybersecurity protocols.