Imagine changing your locks while the burglar is still in your kitchen. That's what a lot of companies did last week, and most of them still can't tell you whether anyone got in. PHP2Shell went from disclosure to mass exploitation faster than most security teams could even schedule the patch. AI is shrinking that window. By the time your Tuesday change-control meeting rolls around, the exploit is already written and the scanning has started. A patch shuts the door but can't tell you who…