{
  "id": 19665034,
  "title": "The death of the 14-day patch: Surviving machine-speed vulnerability discovery",
  "url": "https://urgent.news/2026/11/12/the-death-of-the-14-day-patch-surviving-machine-speed-vulnerability",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-12T15:00:00.000Z",
  "source": {
    "name": "The New Stack",
    "slug": "the-new-stack",
    "url": "https://thenewstack.io/machine-speed-vulnerability-discovery/"
  },
  "original_language": "en",
  "account": null,
  "summary": "The article titled \"The death of the 14-day patch: Surviving machine-speed vulnerability discovery\" discusses the rapid acceleration in the discovery of software vulnerabilities in 2026. In the first nine months of the year, 75,242 CVEs were recorded, accounting for about 20% of all vulnerabilities since the CVE program began in 1999. The pace of discovery has outpaced the ability to remediate these vulnerabilities, rendering the traditional two-week patch cycle obsolete. The surge in vulnerability discovery is attributed to the transformation of vulnerability hunting from an artisan craft to an autonomous, distributed compute problem. Modern agentic security systems now perform full-context semantic analysis, cloning repositories, tracing data flows, constructing exploit payloads, and confirming exploitability before alerting. Additionally, automated agents continuously traverse open-source package registries and public repositories, testing various software runtimes for vulnerabilities. This shift in vulnerability discovery methods has led to a cascade of operational issues, including an unmanageable exposure gap, alert paralysis, and triage debt.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}