Executive Summary
CERT-In recommends patching critical internet-facing flaws within 12 hours where feasible, citing AI and LLM use to automate exploitation.
What Happened
The Indian Computer Emergency Response Team (CERT-In) has issued new guidelines requiring organizations to patch critical security vulnerabilities in internet-exposed systems within 12 hours of being flagged where "feasible" to safeguard against potential threats stemming from threat actors' abuse of artificial intelligence (AI) tools and large language models (LLMs) to automate vulnerability
Vulnerability / Attack Technique
AI-automated vulnerability exploitation
Technical Mechanism
Regulatory guidance.
AI Security Category
AI-assisted attack
Part of the AI-Assisted Attacks topic.
RealGround Analysis
Regulators are shortening patch expectations because of AI.
Recommended Controls
- Patch internet-facing critical flaws within 12 hours
Related RealGround Service
AI Security Readiness Assessment · or start with the free AI Agent Security Scanner.
Sources
thehackernews.com: https://thehackernews.com/2026/05/cert-in-mandates-12-hour-patching-for.html
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.