Why cyber risk management must move as fast as attackers

In October, researchers used artificial intelligence to uncover PHP2Shell, an old flaw in PHP, which powers roughly 70 percent of websites; patches appeared within a day, and the NSA advised sites unable to patch to go offline. AI now lets attackers analyze patches and develop exploits in hours, and an amateur reportedly used AI tools to steal customer data from a South Korean bank. Eddah Thuo argues that quarterly assessments and compliance-focused approaches cannot keep pace with changing threats. She recommends continuous visibility into systems, pre-agreed decisions about taking systems offline, financial measures of risk, and shared responsibility between IT teams and business leaders.