# Google reports AI doubles vulnerability disclosures in 2026

Digest AI · Policy & Regulation · published 2026-09-30T07:00:00Z

Canonical: https://digestai.news/story/google-reports-ai-doubles-vulnerability-disclosures-in-2026

## Summary

Google’s Threat Intelligence Group found monthly software vulnerability disclosures doubled from January to August 2026, rising from 5,045 in January to 10,740 in August. GTIG warned that automated tagging in open-source ecosystems inflates totals, citing 5,000 Linux Kernel-related records with no wild exploits despite their volume.

Exploited flaws also grew: 141 were used in the wild between January and August, up from 127 in all of 2025. Zero-days averaged 11 per month this year, with August spiking to 22. GTIG linked AI’s ability to identify memory corruption and logic flaws in C/C++ code to the higher risk profile. The report highlighted CVE-2026-1731, an AI-discovered flaw in BeyondTrust’s products exploited within days of disclosure. AI software itself saw 2,076 disclosures since 2025, with 1,500+ in 2026, driven by workflow builders like Flowise and Langflow. GTIG advised prioritizing patches based on threat intelligence and urged vendors to use AI for pre-release code reviews.

## Key points

- Google’s Threat Intelligence Group saw vulnerability disclosures double from 5,045 in January to 10,740 in August 2026
- AI-found flaws account for half of disclosures, with 58% rated moderate risk—higher than human-scanned bugs
- BeyondTrust’s CVE-2026-1731, found by Hacktron AI, was exploited within four days of disclosure

## Why it matters

AI’s ability to uncover deeper code flaws accelerates exploit development, raising risks for enterprises while forcing vendors to adopt proactive security reviews.

## Sources

1. [Google finds vulnerability disclosures doubled as AI changes which flaws get discovered](https://siliconangle.com/2026/09/30/google-finds-vulnerability-disclosures-doubled-as-ai-changes-which-flaws-get-discovered) (siliconangle.com, 2026-09-30)

## Cite

Digest AI, "Google reports AI doubles vulnerability disclosures in 2026", 30 September 2026, https://digestai.news/story/google-reports-ai-doubles-vulnerability-disclosures-in-2026

---

Written by Digest AI's editorial model from the linked sources; the sources are the record. Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse
JSON: https://digestai.news/story/google-reports-ai-doubles-vulnerability-disclosures-in-2026.json