Scworld Large Companies Struggle with Unpatched Critical Vulnerabilities Amid AI Threats
Article Content
- •66% of large companies leave critical vulnerabilities unpatched, compared to 27% in smaller firms.
- •91% of security leaders report that AI-accelerated attacks have changed their jobs significantly.
- •54% of security leaders experience burnout, impacting their ability to defend against threats.
A recent survey by Chainguard revealed that 66% of security leaders in companies with over $1 billion in revenue admit to sometimes leaving high or critical vulnerabilities unpatched. This contrasts with 27% in smaller firms under $250 million. The study highlights that AI-accelerated attacks have significantly changed the cybersecurity landscape, with 91% of respondents acknowledging this shift. Many organizations face challenges in patching due to business trade-offs and operational disruptions. Additionally, 54% of security leaders reported that burnout is impacting their teams' effectiveness. The survey, conducted with 1,300 security leaders, indicates a growing concern about the speed of AI-driven exploitations outpacing remediation efforts. Companies are reallocating resources and hiring more staff to address these vulnerabilities, but a significant gap remains between vulnerability discovery and remediation.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Anduril in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What percentage of large companies leave vulnerabilities unpatched?
How has AI affected security operations?
What are companies doing to address vulnerabilities?
Continue Reading
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…
Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…