{"version":1,"type":"story","url":"https://digestai.news/story/opinion-ai-driven-vulnerability-discovery-surges-as-tools-expose-thous","json":"https://digestai.news/story/opinion-ai-driven-vulnerability-discovery-surges-as-tools-expose-thous.json","markdown":"https://digestai.news/story/opinion-ai-driven-vulnerability-discovery-surges-as-tools-expose-thous.md","slug":"opinion-ai-driven-vulnerability-discovery-surges-as-tools-expose-thous","headline":"Opinion: AI-driven vulnerability discovery surges as tools expose thousands of flaws","summary":"AI‑enhanced bug hunting is already reshaping cybersecurity, according to researchers. Microsoft reported issuing patches for 974 CVEs in September, a record for a single month. Oracle shipped 1,448 patches in July, up sharply from 309 in July 2025, while Google Chrome’s two major releases in June contained 1,072 patches, more than the total fixes in the previous 23 major releases combined. Mozilla disclosed 271 Firefox vulnerabilities discovered during a sprint that used Anthropic’s Mythos model. The cumulative count of CVEs logged by cve.icu reached 66,401 as of this week, double the 33,512 recorded by September 16 last year, and far above the 25,000 CVEs logged for all of 2022, the year OpenAI launched the first ChatGPT.\n\nJerry Gamblin, head of research at Empirical Security and founder of RogoLabs, says the rise in CVE numbers reflects more known flaws rather than more inherent risk, but warns that remediation cannot keep pace with discovery. Matthew Olney of Cisco notes that both attackers and defenders are still figuring out where to apply AI. The article argues that any AI slowdown aimed at preventing existential threats will not halt the ongoing vulnerability tsunami driven by existing AI tools.","keyPoints":["Microsoft patched 974 CVEs in September, a new monthly record.","Oracle released 1,448 patches in July, compared with 309 in July 2025.","cve.icu logged 66,401 CVEs as of this week, up from 33,512 a year earlier."],"whyItMatters":"AI‑assisted vulnerability discovery is outpacing patching capacity, raising systemic security risks for software ecosystems and challenging the effectiveness of AI slowdown proposals.","category":{"slug":"society","name":"Society & Work","url":"https://digestai.news/category/society"},"entities":{"companies":["Microsoft","Oracle","Google","Mozilla","Anthropic","Cisco Systems"],"models":["Mythos"],"people":["Jerry Gamblin","Matthew Olney"]},"firstPublishedAt":"2026-09-19T11:00:00Z","updatedAt":"2026-09-19T11:00:00Z","sourceCount":1,"hasPrimarySource":false,"sources":[{"outlet":"Wired AI","title":"Forget the AI Slowdown—the Vulnerability Explosion Is Already Happening","url":"https://wired.com/story/kernel-panic-ai-vulnerability-explosion","publishedAt":"2026-09-19T11:00:00Z","type":"press","primary":false,"lead":true}],"sourceNotes":null,"discussions":[],"thread":{"title":"AI Unlocks Massive Software Vulnerability Surge","url":"https://digestai.news/thread/microsoft-releases-record-974-patches-including-2-zero-days","storyCount":2},"cite":{"text":"Digest AI, \"Opinion: AI-driven vulnerability discovery surges as tools expose thousands of flaws\", 19 September 2026, https://digestai.news/story/opinion-ai-driven-vulnerability-discovery-surges-as-tools-expose-thous","publisher":"Digest AI","title":"Opinion: AI-driven vulnerability discovery surges as tools expose thousands of flaws","datePublished":"2026-09-19T11:00:00Z","url":"https://digestai.news/story/opinion-ai-driven-vulnerability-discovery-surges-as-tools-expose-thous"},"generatedBy":"Written by Digest AI's editorial model from the linked sources; the sources are the record.","license":"Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse"}