Critical cyber vulnerabilities outpace enterprise response, Zscaler says
ZS•Zscaler says critical cybersecurity vulnerabilities are outpacing enterprise response capacity as AI-assisted research shortens the time between discovery and attack. In October, two critical web application flaws exposed internet-facing servers to unauthenticated remote code execution, while Microsoft patched more than 1,400 vulnerabilities in one release.
1. Rising vulnerability pressure
Zscaler says critical cybersecurity vulnerabilities are outpacing enterprise response capacity, increasing exposure as AI-assisted research shortens the window between discovery and attack. Two critical web application flaws exposed internet-facing servers to unauthenticated remote code execution in October, with exploitation underway before emergency patches. Microsoft patched more than 1,400 vulnerabilities in one October release, exceeding its total for all of 2025.
2. Security controls
Zscaler says boards should assess security staffing, patch prioritization and compensating controls as vulnerability volumes strain enterprise defenses. It says Zero Trust access controls can reduce internet-facing exposure when organizations cannot patch quickly enough.
