Просмотр новости
Найдите то, что Вас интересует
Спутники
РН
SpaceX
Роскосмос
NASA
СпутникиРНSpaceXРоскосмосNASAAnalysis from vulnerability intelligence firm VulnCheck shows AI-discovered flaws aren't being exploited any faster than traditional ones.
The post AI-assisted security tools are finding more bugs, but the threat level has not changed appeared first on CyberScoop.
AI systems like Anthropic’s Project Glasswing and Microsoft’s MDASH are aiding in the discovery of vulnerabilities, filling the ever-growing pool of defects that defenders have to address before exploitation occurs. Yet, through the first half of 2026, these vulnerabilities were no more or less likely to be exploited than all vulnerabilities disclosed during that period, VulnCheck said in a report Tuesday.
Concerns remain high about AI-discovered vulnerabilities fueling more attacks, but VulnCheck’s review of exploitation data shows that those fears are unfounded, at least so far.
Patrick Garrity, security researcher at VulnCheck and report author, identified 1,061 vulnerabilities attributed to AI-assisted discovery during the first six months of the year. Of those vulnerabilities discovered by AI, 14 ( 1.3%) were exploited in the wild, a breakdown that aligns with the exploitation rate researchers observed across all vulnerabilities during the same period.
“While AI-assisted vulnerability discovery clearly has value for both attackers and defenders, the data does not suggest that AI discovered vulnerabilities are inherently more likely to be exploited than those found through traditional methods,” Garrity wrote.
While AI’s contribution to actively exploited vulnerabilities was muted in the first half of the year, it’s too soon to assume that trend will continue. Moreover, none of these major vulnerability-hunting models were running for that full period. Project Glasswing rolled out in April, while Microsoft’s MDASH and OpenAI’s Daybreak were both unveiled in May.
The upward trend in Microsoft’s monthly Patch Tuesday indicates how much the floodgates might open through the remainder of the year as AI models discover more vulnerabilities. The company’s July security update contained an all-time-record of 622 vulnerabilities, besting the previous record-breaking June update with 206 vulnerabilities.
VulnCheck’s state of exploitation report also found that vulnerabilities were exploited much faster after CVE publication, speeding up from an average of 120 days in 2025 to 80 days during the first half of the year.
The intelligence firm also determined which technology categories were actively exploited most often. Content management systems accounted for nearly one-third of the 495 known exploited vulnerabilities VulnCheck identified during the first half of 2026. Network edge devices were responsible for almost 14%, followed by operating systems at nearly 9%, server software at 8%, and AI products — an emerging attack surface — at almost 6%.
| # | Наименование новости | Тональность | Информативность | Дата публикации |
|---|---|---|---|---|
| 1 | AI is finding bugs faster than Microsoft can fix them | 0 | 13.41 | 30-07-2026 |
| 2 | The AI code vulnerabilities that grow with your app | 0 | 8.82 | 23-07-2026 |
| 3 | Spy agencies say AI can help combat AI cyber risks. But don’t forget the basics | 0 | 6 | 24-06-2026 |
| 4 | Безопасники бьют тревогу. В сервисах ИИ двукратный рост ИТ-уязвимостей | 1 | 17.78 | 03-08-2026 |
| 5 | The Hidden Cost of AI Security Scanners | 0 | 7 | 20-05-2026 |
| 6 | AI models keep getting caught cheating | 0 | 8.98 | 21-07-2026 |
| 7 | Google gives developers an AI bug hunter that also writes patches | 0 | 7.88 | 24-07-2026 |
| 8 | GitHub revamps bug bounty program with new VIP tier, payout changes | 0 | 13.38 | 23-07-2026 |
| 9 | OpenAI Expands GPT-5.5-Cyber as AI Pushes Vulnerability Patching Into a New Era | 5 | 7 | 24-06-2026 |
| 10 | AI Agents Are Creating a New Enterprise Security Gap | 0 | 5 | 03-07-2026 |