85% of Java shops have had an incident or near miss from slow patching. AI-equipped attackers need three days or less
Security leaders know the threat has changed. What the data suggests is that their patch processes have not. According to The 2026 AI Vulnerability Gap Report from Azul, released on 11 November, 85% of organisations running significant volumes of Java have already experienced an incident, suspected incident or near miss attributable to slow patching. That figure includes 55% who report a confirmed incident and 53% who report a near miss, with respondents able to select both.
The report is based on a survey of 300 U.S. security leaders at organisations where Java makes up a significant share of the production application estate, conducted independently by Censuswide. Its central theme is that AI is shrinking the time attackers need to exploit newly disclosed vulnerabilities while enterprise defences remain, in the words of Azul’s chief executive, built for a slower era.
“Agentic AI has collapsed the margin defenders depend on, and...
Copyright of this story solely belongs to www.expresscomputer.in. To see the full text click HERE
