AI cut exploit timelines to 24 hours in 2026 while patching takes 43 days, widening exposure and driving BAS adoption.