Google’s Threat Intelligence Group reported vulnerability disclosures doubled to 10,740 in August 2026. AI is changing the pace and types of vulnerabilities discovered. Exploited vulnerabilities this year already surpass all of 2025. Threat actors now weaponize known flaws faster than they discover new zero-days. AI agents found a critical BeyondTrust bug later exploited within days. Hackers used AI to scan patches and automate exploitation. Edge and security appliances remain a key target for attackers. CISA reported over 67,000 new CVEs published so far in 2026. Annual CVE submissions rose 263% from 2020 to 2025. The trend is expected to continue in the short to medium term.
What changed
Vulnerability disclosures were around 5,000 per month at the start of 2026.
What it unlocks
Threat actors can weaponize known vulnerabilities faster using AI tools.
- 10,740 vulnerability disclosures in August 2026
- 141 exploited vulnerabilities in 2026
- 127 exploited vulnerabilities in 2025
- 67,000 new CVEs published in 2026
Sources