N-day is Becoming N-Hour. Patching Faster Won't Save You.

Vendors releasing security fixes essentially reveal the vulnerabilities they are patching, as the differences between the old and new code can be used to create exploits. By analyzing these differences, attackers can develop working exploits to target unpatched systems. This creates a race where vendors patch vulnerabilities, and defenders must quickly deploy the fixes before attackers can exploit them. The time available for defenders to update their systems before being targeted is decreasing. The speed at which patches are applied is not a guarantee of safety. Attackers can now exploit vulnerabilities almost immediately after a patch is released.