AI Zero‑Days Elevate Mid‑Firm Risk

AI tools can now find exploitable software vulnerabilities quickly, as shown by an AI‑assisted discovery of a PHP flaw that tripped national‑security alarms and forced emergency patching. Coupled with evidence that mid‑size firms face the highest attack incidence and that vulnerability disclosures have surged, this implies a new equilibrium where AI accelerates attack discovery and raises systemic supply‑chain risk. — If AI both accelerates exploit discovery and democratizes attack capability, policymakers and firms must rethink cyber investment, regulation, insurance, and supply‑chain resilience—especially for midsize firms that are economically important but underprotected.