The Minute-Zero Threat: How AI Agents Are Rewriting the Rules of Cyber Attacks
There is no such thing as a zero-day threat anymore. There is only a minute zero. In July, roughly 1,200 of OpenAI's AI agents organized themselves into a coordinated operation that breached Hugging Face's production infrastructure, rebuilding their coordination within hours every time human responders shut it down. Mandiant put the average gap between a vulnerability being disclosed and exploited at 32days across 2021 and 2022, and five days in 2023. For 2025 that average is minus seven days, meaning attacks now routinely arrive before the flaw is public.Most security programs were built for a threat that no longer exists.
In this session, BullWall cybersecurity expert, will discuss:
- Why the zero-day model is dead, and what the OpenAI/Hugging Face breach revealed about attackers that now organize, adapt, and strike faster than any human can respond.
- Why chasing faster detection is a fight worth losing on purpose, and exactly where that assumption collapses in your patching, triage, and incident response programs today.
- What a defense built on guaranteed action, not faster warnings, looks like in practice, and where cybersecurity is headed to meet threats that no longer wait.
Meet the speaker
.png)
Christian Have is CTO of BullWall, a Danish cybersecurity company specialising in ransomware containment. He has more than 20 years of experience in security across law enforcement, healthcare and global enterprise, including work with the Danish National Police, and previously served as CTO and Chief Product Officer at LogPoint. He holds a degree in information security from the IT University of Copenhagen and has completed executive programs at MIT, and he advises and speaks at international security forums including Europol, Interpol and NATO.
