"Exploit time dropped from 30 days to 30 minutes" — the 30 minutes was one researcher, one patch, and a denial-of-service proof of concept
2026-08-15Security
The claim is everywhere and the argument behind it is good. The number is not a measurement. It comes from a single blog post in May 2026 describing a local experiment on React, and the industry statistics stacked around it come from different vendors counting different things.