Proofpoint Launches Active Exploits Protection Against AI-Driven Cyber Threats

Proofpoint launched Active Exploits Protection in late May 2026, a cybersecurity solution designed to counter AI-accelerated cyber threats by identifying software vulnerabilities actively being exploited in the wild. The product draws on real-world telemetry from over 5,000 sensors and millions of daily email interactions to prioritize remediation based on actual attacker behavior rather than theoretical severity scores. Proofpoint reports that fewer than 6% of disclosed vulnerabilities are ever exploited, arguing that security teams waste resources chasing flaws attackers never target.

The system translates exploit intelligence into protection across primary attack paths in approximately 35 seconds, with network-wide propagation in under 18 minutes. Proofpoint developed the tool to address a fundamental shift in the threat landscape, where AI models autonomously discover and weaponize flaws faster than traditional patching cycles can respond. The company aims to reduce the exposure window for zero-day threats to a median of minutes. The product benchmarks exploit activity against the Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities catalogue.

Cognizant announced plans to integrate the offering into its managed security and threat response services for clients. Proofpoint CEO Sumit Dhawan stated that the speed of evolving threats has changed the risk equation, emphasizing that organizations must understand real-time attacker exploitation to reduce exposure. Vishal Salvi, Global Head of Cognizant's Cybersecurity Service Line, noted the need for a sharper view of attacker targets and intends to help clients operationalize the new protection tool. The product is available globally via API and integrated platform functions.