AI-Driven Vulnerability Discovery Fuels Fears of a Cyber 'Patch Wall'

European and national cyber authorities are warning that AI is rapidly increasing the speed and scale of vulnerability discovery and exploit development, raising the prospect of a sustained remediation crisis. The European Central Bank told about 110 major banks to assess AI-enabled cyber threats and submit action plans by October 31, 2026, while the European Systemic Risk Board and European Supervisory Authorities issued parallel warnings on systemic risk from frontier AI models. In France, ANSSI Director General Vincent Strubel told senators that AI-assisted discovery could create a multi-year "patch wall", overwhelming remediation teams even as basic controls such as network segmentation, identity and access management, and timely patching remain the most effective defenses.

Industry reporting and vendor disclosures show why regulators are escalating. Mozilla said frontier AI models helped identify 271 vulnerabilities fixed in Firefox 150 after an earlier run found 22 security-sensitive bugs, while researchers and commentators say LLM-assisted patch diffing can shrink the path from a disclosed CVE to a working proof of concept to days or even hours, including for flaws such as CVE-2025-32433 in Erlang/OTP SSH. At the same time, access controls around advanced cyber-capable models are tightening unevenly: Anthropic expanded its restricted Project Glasswing program for Claude Mythos to critical-infrastructure organizations, but open-weight alternatives such as Zhipu AI's GLM-5.2 are reported to deliver competitive vulnerability-finding performance at lower cost, reinforcing concerns that powerful offensive-relevant capability is spreading faster than most enterprises can patch.