Google AI fuels doubling of monthly vulnerability disclosures

Overview

Vulnerability disclosures have surged dramatically in 2026, doubling from the start of the year to reach a new monthly peak. According to Google’s Threat Intelligence Group (GTIG), the number of identified security flaws hit 10,740 last month, up from just 5,045 in January. This steep upward trend highlights a significant shift in the cyber threat landscape, driven largely by the integration of artificial intelligence into both offensive and defensive operations.

The acceleration in reporting is not merely a statistical anomaly but reflects a tangible change in how threat actors discover and exploit software weaknesses. Researchers at GTIG noted that AI is measurably altering the pace, types, and risk profiles of vulnerabilities being uncovered. The volume of distinct vulnerabilities disclosed and exploited between January and August alone has already surpassed the totals recorded for all of 2025.

“We found that AI is measurably changing not just the pace of vulnerability discovery and exploitation, but also the types and typical risk profiles of vulnerabilities that are being discovered.”

The AI-Driven Shift in Exploitation

A key finding from the GTIG report is that the current spike in vulnerability exploitation is not primarily driven by an increase in zero-day attacks. Instead, the surge is fueled by the rapid, targeted weaponization of known, high-risk exploits in the wild. This represents a strategic pivot where attackers prioritize speed and efficiency over the high-cost development of entirely new vulnerability classes.

Attackers are increasingly leveraging artificial intelligence to automate the analysis of software patches and identify critical bugs. This automation allows threat clusters to move from discovery to active exploitation with unprecedented speed. Kelli Vanderlee, a senior analyst at GTIG, emphasized that this trend is expected to grow throughout the short-to-medium term as AI tools become more accessible.

Researchers observed that threat actors are finding it more efficient to use large language models (LLMs) and specialized AI tools to analyze differences between product versions, patch notes, and proof-of-concept code. This process enables the rapid weaponization of n-days—vulnerabilities that have already been patched and publicly disclosed—rather than spending resources on discovering new zero-days.

The efficiency of this approach was illustrated by the case of CVE-2026-1731, a vulnerability in BeyondTrust software that was highlighted by federal cyber defenders in February. The flaw was discovered autonomously by a third-party research agent named Hacktron AI. Within four days of the vulnerability’s public disclosure, GTIG observed one threat cluster actively exploiting it, followed by five additional clusters within seven days.

These actors engaged in sophisticated post-exploitation activities, including privilege escalation, data exfiltration, and the deployment of secondary payloads such as SNOWLIGHT, SPARKRAT, and cryptominers. The incident served as a stark example of how autonomous research agents can uncover high-severity flaws and how quickly those flaws can be turned into weapons when directed at critical attack surfaces.

Risk Profiles and Vulnerability Sources

AI agents are currently being utilized predominantly to identify medium and high-risk vulnerabilities. GTIG defines a high-risk bug as one where exploitation would allow attackers to have a notable, direct impact on the security of targeted devices and networks without needing to overcome significant mitigating factors. The reliability of exploitation for these bugs is expected to be high, enabling attackers to operate on a wide scale.

While the overall volume of disclosures has increased, the report indicates that many of these vulnerabilities originate from a concentrated group of vendors. Companies such as router firmware manufacturer Totolink and tech giant Oracle have contributed significantly to the current disclosure landscape. This concentration suggests that specific supply chains or enterprise software dependencies remain critical points of failure.

Threat actors continue to focus their exploitation efforts on perimeter appliances and exposed enterprise services. Data from January through August shows that 14% of exploited vulnerabilities affected edge and security appliances. These assets remain high-value targets because compromising them can provide attackers with a foothold inside corporate networks, facilitating further lateral movement and data theft.

“Reliability of exploitation is expected to be high and can typically be done on a wide scale.”

Broader Industry Context and Statistics

The trends identified by Google align with broader industry data released recently by the Cybersecurity and Infrastructure Security Agency (CISA). CISA reported that more than 67,000 new Common Vulnerabilities and Exposures (CVEs) had been published in 2026. Experts project that the total number of new CVEs will reach approximately 96,000 by the end of the year, marking a sustained growth in the vulnerability landscape.

Historical data from the National Institute of Standards and Technology (NIST) further underscores the magnitude of this increase. The NIST National Vulnerability Database program reported a 263% increase in annual CVE submissions between 2020 and 2025. In the first three months of 2026 alone, submissions were one-third higher than during the same period in 2025.

This exponential growth in disclosed vulnerabilities presents a significant challenge for organizations tasked with patch management and security monitoring. As AI lowers the barrier to entry for exploiting known flaws, the window between disclosure and active exploitation continues to shrink. Security teams must now operate under the assumption that n-days will be weaponized within days, if not hours, of public disclosure.

The findings from GTIG and CISA collectively point to a future where the volume of vulnerabilities will not stabilize but continue to rise. The integration of AI into the attack lifecycle has created a feedback loop where automated discovery leads to faster exploitation, which in turn drives more urgent disclosure and patching efforts. As this cycle accelerates, the reliance on AI-driven defense mechanisms will likely become just as critical as the AI-powered tools used by adversaries.