AI-Driven Vulnerability Discovery Surges Amidst Increased Security Demands
Article Content
- •Vulnerability disclosures increased by 578% in 2026 across major software vendors.
- •AI tools identified over 14,000 new vulnerabilities in just two months.
- •55% of AI-discovered vulnerabilities are classified as high or critical severity.
In 2026, AI-assisted vulnerability research has led to a significant rise in publicly disclosed vulnerabilities, with a 578% increase reported across major software vendors like Microsoft and Oracle. IBM X-Force noted that from January to September 2026, disclosures rose from approximately 1,493 to over 10,124. The surge in AI-discovered vulnerabilities, with 55% classified as high or critical severity, poses challenges for organizations in managing remediation efforts. Notably, CVE-2026-4702, published on March 24, 2026, has a CVSS score of 9.8 and is classified as critical. The increasing volume of vulnerabilities discovered by AI tools, such as Unit 42's NOVA platform, raises concerns that IT teams may struggle to keep up with patching demands as the number of vulnerabilities grows.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Nova, ThreatDown and CVE-2026-4702 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What vulnerabilities were disclosed?
How many vulnerabilities were discovered by AI?
What challenges do organizations face?
Continue Reading
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…