AI-Powered Vulnerability Discovery Hits Record High as Cybersecurity Teams Struggle to Keep Pace

The number of software security vulnerabilities discovered using AI tools has surged to a record high, according to a report by Wired magazine. The total number of registered CVE vulnerabilities worldwide doubled in a single year to 66,401 as of this Wednesday, compared to 33,512 in the same period of September 2025.

Major tech companies like Microsoft, Oracle, and Google are struggling to keep up with the pace of vulnerability discovery. Microsoft patched 974 CVE vulnerabilities this month alone, a company record for the most fixes in a single month. Oracle released a staggering 1,448 patches in July 2026, compared to just 309 in July 2025, a nearly fourfold increase.

Jerry Gamblin, founder of RogoLabs, operates the CVE tracking project cve.icu and notes that more CVEs do not necessarily mean more vulnerabilities. However, the risk does not automatically dissipate simply because 'discovery equals progress.' The core tension is that AI can discover vulnerabilities far faster than humans can fix them.