Google Threat Intelligence, Help Net Security AI · 3 sourcesGoogle Threat Intelligence · 3 sources · 3 reports · GTIG Report: Vulnerability Disclosure and Exploitation Trends in the AI Era
Google Threat Intelligence Group (GTIG) released "Vulnerability Discovery and Exploitation Trends in the AI Era" on September 30, 2026, analyzing vulnerability data from January 2025 to August 2026. The report states that monthly CVE disclosures increased from 5,045 in January 2026 to 10,740 in August, with only about 0.23% observed being exploited in the wild, but 141 vulnerabilities were exploited in the first eight months, exceeding the 127 for all of 2025, with growth mainly from n-day. In-the-wild exploitation rose from a monthly average of 10.5 in 2025 to 18 in 2026, while zero-day exploitation only increased slightly from a monthly average of 8 to 11. Among vulnerabilities judged as possibly discovered by AI, exactly 50% can lead to remote code execution, compared to 26% in the entire CVE ecosystem. The report tracked a total of 2,076 AI-related vulnerabilities.
