a16z：AI 把漏洞利用成本降到几小时，攻击窗口反超补丁速度
a16z 两位作者用数据说话：AI 把写 exploit 从一个月缩到几小时，补丁却要 43 天，攻击比修复还快了。
a16z 的 Asaf Ezra 和 Steph Zhang 分析指出，编写 exploit 曾是网络攻击中耗时约一个月的瓶颈，如今 AI 把这一步压缩到几小时的机器时间。攻击到达时间从 2018-19 年披露后平均 63 天，变为 2025 年的披露前 7 天。与此同时，修复已知被利用漏洞的中位时间上升至 43 天。作者预计将出现漫长的蠕虫式攻击时期，医院、学校和小型供水系统等难以快速更新的机构受影响最大。
For two decades, writing the exploit was the bottleneck in a cyberattack. AI made that step cheap, and patching hasn't gotten faster: - On average, attacks went from landing 63 days after disclosure in 2018-19 to 7 days before it in 2025 - A working exploit went from a skilled person's month to a few hours of machine time - The median time to fully fix a known-exploited bug rose to 43 days a16z's @asaf_ez and @steph_zhang expect a long, expensive worm era, hitting hardest where systems can't update fast: hospitals, schools, small water systems. "When attacking is nearly free, attackers no longer need to want a target." Full piece from Asaf Ezra and Steph Zhang: a16z.news/p/the-exploit-… Asaf Ezra @asaf_ez x.com/i/article/2118… 🔗 View Quoted Tweet 💬 0 🔄 1 ❤️ 2 👀 3321 ⚡
