GTIG报告：AI时代漏洞披露与利用趋势

1. 13:00
   Help Net Security AISelected

   Google GTIG: Half of AI-discovered vulnerabilities can lead to remote code execution; CVE-2026-1731 exploited within four days of disclosure.

   Google Threat Intelligence Group (GTIG) analyzed vulnerability data from January 2025 to August 2026: monthly CVE disclosures in 2026 increased from 5,045 in January to 10,740 in August, with only about 0.23% observed exploited in the wild, but 141 vulnerabilities were exploited in the first eight months, exceeding the 127 for all of 2025. GTIG believes the growth is mainly from n-day. Among vulnerabilities judged likely discovered by AI, half can lead to remote code execution (26% for other sources), which GTIG attributes mainly to research projects using AI agents to audit infrastructure and permission boundaries. The BeyondTrust command injection vulnerability CVE-2026-1731, discovered by the Hacktron AI research agent, was exploited by one threat cluster within four days of disclosure, with five more clusters following within seven days. Among vulnerabilities disclosed this year in AI-related software, half affect agent orchestration frameworks such as Flowise and Langflow, where attackers can trigger code execution via prompt injection or crafted workflow JSON.

1. 22:00
   Google Threat IntelligenceSelected

   GTIG 报告：AI 时代漏洞披露与利用趋势

   Google Threat Intelligence Group（GTIG）分析 2025 年 1 月至 2026 年 8 月的漏洞披露与利用数据，认为 AI 正在改变漏洞发现与利用的速度和风险结构。月度漏洞披露量从 2026 年 1 月的 5,045 增至 7 月的 10,477，8 月达到 10,740；在野利用从 2025 年月均 10.5 升至 2026 年月均 18，零日利用仅从月均 8 微增至 11。高风险漏洞披露从 1 月的 131 增至 8 月的 350，增长 167%，主要由 TOTOLINK 路由器固件批量披露以及 Oracle 季度补丁与 Linux 内核网络驱动公告推动。

1. Date not given
   Severity Daily

   解读 GTIG AI 漏洞趋势报告：公开署名样本中 RCE 占比 50%

   Google Threat Intelligence Group 于 2026 年 9 月 30 日发布《Vulnerability Discovery and Exploitation Trends in the AI Era》，报告称 AI 发现的漏洞中恰好 50% 导致远程代码执行（RCE），而整个 CVE 生态中这一比例为 26%。报告统计窗口为 2025 年 1 月至 2026 年 8 月，累计追踪 2,076 个 AI 相关 CVE，其中 1,500 多个来自 2026 年 1 月至 8 月；披露量从 2026 年 1 月的 5,045 个增至 7 月的 10,477 个，8 月峰值 10,740 个。GTIG 自述其统计依赖厂商公开署名，并承认因缺乏标准化元数据、厂商直接在生产环境静默修补而不申请 CVE，公开数据显著低估 AI 发现的漏洞数量，但未说明低估偏向哪个方向。

Current attention59·Peak in the comparable period61（Oct 8 14:00）·Change over the comparable past 24 hours +5%