N-day is Becoming N-Hour. Patching Faster Won't Save You.

Summary: Anthropic's red team found that Claude Mythos Preview, given only the public patch diff and two builds, turned 18 Firefox patches into 8 working code-execution exploits, with the first landing under an hour after Mozilla shipped the fix while the patched Firefox release was still 18 days out. Against 21 Windows kernel bugs using only stripped binaries and decompiler output, it built proof-of-concept crashes for 18 (fastest in 31 minutes) and chained 8 to SYSTEM at roughly $2,000 each, including one bug Microsoft had rated "Exploitation Unlikely."
Bottom line: The step that used to buy defenders weeks - turning a patch into a working exploit - now runs in under an hour, and the patch itself is the artifact that arms the attacker. With roughly 135 new CVEs a day, up about 40 percent year over year, a backlog where everything scores 9.8 prioritizes nothing.

Read the original at The Hacker News ↗