White paper · May 2026

AI-Armed Adversaries

Adversaries are now using AI to find and weaponise vulnerabilities at machine speed. Here's what that means for financial services, and what to do about it.

Download the White Paper All White Papers
AI-Armed Adversaries white paper cover
20%of breaches in Verizon's 2025 DBIR involved vulnerability exploitation
0 daysmedian time from disclosure to mass exploitation
32 daysmedian time to remediate edge device vulnerabilities
May 2026first zero-day exploit identified as AI-developed, in the wild (Google GTIG)
Inside the research

What's Inside

  1. The Closing Window: Why the gap between disclosure and exploitation has collapsed to zero days while remediation still takes weeks
  2. AI Watershed: AI is now finding and building exploits in the wild, confirmed by Google's threat intelligence team
  3. The Defensive Mirror: The same capability that arms attackers is arming defenders, and the advantage goes to whoever deploys first
  4. The Regulatory Position: How the PRA, RBNZ, FMA and APRA are responding, and the 72-hour clocks NZ firms now operate under
  5. Why Annual Testing Is No Longer Enough: Why a point-in-time test decays the moment it's filed, and what wraps around it
  6. Continuous Assurance and Remediation: What detection and remediation at the speed of the threat actually look like in practice
Book a Meeting