Corelight

San Francisco – September 18, 2026 -- Corelight has launched the Agent Builder Library and Natural Language Query, two tools designed to let security operations centers match the speed of AI-driven cyberattacks without losing auditability over investigation logic.

Attackers now exploit vulnerabilities in roughly five days, far outpacing patch cycles

Enterprise patching cycles typically run 60 to 150 days, but the median time to exploit has dropped to approximately five days, according to Corelight. The company warns that with emerging Mythos-class AI models, attackers may exploit vulnerabilities before defenders even know a flaw exists, making faster patching an inadequate defense on its own.