AI is finding twice as many software flaws. Almost none get exploited.

AI tools have doubled the rate of software vulnerability discoveries in 2026 compared to 2025, but the proportion of these flaws exploited by attackers remains low and stable. Despite increased findings, exploitation rates have not risen, indicating AI-discovered vulnerabilities are not more targeted than others. Major companies like Oracle and Microsoft have patched significantly more flaws, aided by AI detection.