--- title: "AI is cutting cyber attack windows from years to minutes" url: https://www.nsfw.info/ai-cyber-attack-windows-years-to-minutes/ published: 2026-10-25T09:00:40+00:00 modified: 2026-10-25T09:00:40+00:00 author: "Chief Editor" categories: ["News"] summary: "The director of Jersey and Guernsey's Cyber Security Centres warns AI has shrunk the gap between a vulnerability being found and exploited from years to minutes" publisher: NSFW (https://www.nsfw.info) --- # AI is cutting cyber attack windows from years to minutes **In brief:** The director of the Jersey and Guernsey Cyber Security Centres warns that AI has compressed the time between a vulnerability being discovered and attackers exploiting it from years down to minutes. Matt Palmer says defensive AI tools are not yet widely available, creating a dangerous window for criminals. New legislation and an expanded Channel Islands Cyber Shield are among the measures being put in place to respond. ## A race that is getting faster by the minute If you thought cybersecurity was already a headache, brace yourself. Matt Palmer, director of the Jersey and Guernsey Cyber Security Centres, has painted a sobering picture of how quickly the threat landscape is shifting, and artificial intelligence is the accelerant. “It is a constant battle to maintain visibility of the threats that are coming at us, the vulnerabilities that we have and the actions that we need to take to resolve them,” Mr Palmer told the Jersey Evening Post. The numbers behind that battle are striking. Each year, the centres process notifications covering more than five million potential cyber-security events across the Channel Islands. In October alone, those notifications included 15,900 publicly exposed services, 499 known vulnerabilities, 329 suspected compromised systems and 144 other potential threats. The nature of the threat, Mr Palmer explained, has changed fundamentally. Traditionally, the gap between a vulnerability being discovered and attackers working out how to exploit it was around two years. AI has demolished that buffer. “Over the last few years, that has gone down from years, to months, to weeks, to days and now to minutes,” he said. “That’s a huge problem, because of course organisations do patch their systems, but they tend to have structured and managed processes to do so.” Those patching cycles might run monthly or every couple of months. Some older systems cannot be patched at all. The result, as Mr Palmer put it, is that “the ability for somebody to identify a vulnerability, exploit it and use it to attack you within a matter of minutes can be terrifying.” The point was illustrated vividly this month when a vulnerability in a programming language called PHP, discovered using AI, prompted organisations around the world to take websites offline temporarily to address it before attackers could strike. ## Rethinking the defence playbook The traditional IT instinct, to test updates thoroughly before deploying them, is no longer fit for purpose in this environment. Mr Palmer argues that the calculus has shifted: “It is better to test quickly. It’s better to patch quickly and take a risk of downtime, and that’s a fairly fundamental change for IT teams and IT suppliers to get to grips with.” On AI itself, Mr Palmer is clear-eyed rather than alarmist. “AI is incredibly powerful. It can be used for great good or for great harm, so we need to make sure that we protect ourselves from it.” He believes that in the long run, AI will become “more of a help than it is a hindrance,” but acknowledges that the defensive tools are not yet widely available. “In the short term, however, it’s a very real problem. Over the next few years in particular, the speed at which criminals can act is much, much faster than the speed at which responsible organisations can act.” Mr Palmer’s background includes serving as chief information security officer for a number of global financial services companies, which gives his warnings particular weight for an island whose economy is heavily dependent on finance. ## Building the Channel Islands’ defences The Jersey Cyber Security Centre was initially established as the Cyber Emergency Response Team in 2021. Its Guernsey counterpart launched earlier this year, and the two now operate as a single team sharing tools and processes. Mr Palmer says this arrangement strengthens resilience while reducing costs for taxpayers. On the legislative front, the Cyber Security (Jersey) Law has been signed into commencement by Economic Development Minister Gerald Voisin, with the legislation taking effect in stages. It introduces requirements for operators of essential services covering their digital defences and the reporting of cyber incidents. Mr Palmer drew a direct comparison with physical safety standards: “In exactly the same way that we build health and safety and so on into things, we need to build cyber security in by default.” The Jersey Cyber Shield, through which organisations can register to receive alerts when the centre becomes aware of a vulnerability or compromise, is also set to expand. Speaking at the Channel Islands Cyber Security Conference at the Radisson Blu Waterfront Hotel earlier this month, Mr Palmer announced that the scheme will become the Channel Islands Cyber Shield next year, rolling out to the Bailiwick of Guernsey. A portal to share information in real time, rather than waiting for an analyst notification, is also planned. ## The NSFW Perspective There is something almost poetic about the fact that the same technology promising to revolutionise medicine, education and productivity is simultaneously handing criminals a turbo-charged toolkit. Jersey’s financial services sector, its government systems and its critical infrastructure are all potential targets, and the island is not too small to be noticed. If anything, smaller jurisdictions can be attractive precisely because defences are assumed to be lighter. The expansion of the Cyber Shield to Guernsey and the new legislation are sensible steps, and the shared-services model between the two islands is exactly the kind of pragmatic, cost-conscious cooperation that taxpayers should welcome. The uncomfortable truth, though, is that Mr Palmer himself acknowledges the defensive AI tools needed to fight back are not yet ready. For now, Jersey’s cyber defenders are running a race where the other side just got a very fast car. *Source: [Jersey Evening Post](https://jerseyeveningpost.com/news/2026/10/25/the-complex-and-ever-evolving-battle-against-cyber-threats)*