Skip to content
AI-Driven Vulnerabilities Surge, DevSecOps Overwhelmed

AI-Driven Vulnerabilities Surge, DevSecOps Overwhelmed

First seen 7 Oct 2026, 15:57 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 7, 2026 at 17:29 UTC
  • •Vulnerability backlogs have surged by 131% over two years.
  • •Average resolution time for vulnerabilities has improved to 62 days.
  • •70% of security leaders report faster arrival of new findings than remediation.

HackerOne's report reveals a significant rise in unresolved vulnerabilities, with a 131% increase over two years. Although the average resolution time has decreased from 135 days to 62 days, 70% of security leaders report that new findings are arriving faster than they can be addressed. The use of AI in vulnerability discovery is accelerating the rate of new findings, putting pressure on DevSecOps teams. Additionally, there has been a 557% increase in system prompt leakage reports and a 264% increase in output handling issues. Security researchers are actively upskilling with AI, leading to a 75% tracking of exposure debt among organizations. The report highlights the urgent need for teams to adopt AI for faster remediation as cybercriminals also leverage AI for exploit development.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-07
HackerOne report published
HackerOne reveals a 131% increase in unresolved vulnerabilities and a 54% improvement in resolution time.
Devops

More articles in this cluster (2)

Extracted Entities

1 / 2

Common questions

What is the current state of vulnerability backlogs?
There has been a 131% increase in unresolved vulnerabilities, with many organizations struggling to keep pace.
How has AI affected vulnerability discovery?
AI has accelerated the discovery of vulnerabilities, leading to a faster influx of new findings.
What should organizations do to manage this surge?
Organizations should consider adopting AI tools for faster vulnerability remediation and formally track their exposure debt.