GOOGLE: AI IS CHANGING THE PACE AND PROFILE OF VULNERABILITY DISCOVERY

Summary from the TLDR InfoSec newsletter

Monthly vulnerability disclosures doubled in 2026, reaching over 10,000 by midyear. High-risk flaws rose 167%, and exploited vulnerabilities averaged 18 per month, up from 10.5 in 2025. AI-discovered bugs more often enable remote code execution (50% vs 26%) and skew toward medium and low risk. Researchers saw rapid weaponization of n-days, including a BeyondTrust flaw exploited within four days of disclosure. AI-related CVEs also climbed, with 2,076 tracked since early 2025, though zero-days against AI infrastructure remain unconfirmed.