Google finds vulnerability disclosures doubled as AI changes which flaws get discovered

What happened

Google’s Threat Intelligence Group reported that monthly software vulnerability disclosures doubled from January to August, reaching over 10,700 in August alone. The increase is linked to artificial intelligence agents detecting new flaws, with about half of the AI-discovered vulnerabilities enabling remote code execution. This marks a clear shift in how and which types of security issues get found.

The risk

AI’s role in vulnerability discovery changes the attack surface landscape. Remote code execution (RCE) flaws are among the most serious because they allow attackers to run malicious code on a victim’s system without permission. With AI uncovering many of these critical vulnerabilities, hackers and defenders alike must adapt quickly. The volume and severity of issues inflates pressure on security teams to patch faster and rethink traditional vulnerability management strategies.

Why it matters

Rising disclosures mean a faster-moving threat environment, especially as AI finds flaws that humans might miss or take longer to identify. For organizations, this accelerates the need for automated scanning, patch management, and threat intelligence integration. It also shifts the vulnerability hunting landscape: AI tools become both assets and threats, powering both defense and exploitation. Investors and founders should expect security to become costlier and more complex as the pace and quality of vulnerability detection overlap with AI capabilities.

Who should pay attention

Security operations teams, vulnerability researchers, and software developers must recalibrate risk assessment models to account for AI-driven discovery patterns. Executives must budget accordingly for accelerated patch cycles and enhanced monitoring. Businesses relying on legacy software or slow update processes become more exposed. Regulators may also need to consider how AI shapes software supply chain risks, as AI uncovers defects faster than traditional audits.

What to watch next

The response of the security industry to this surge will be critical. Watch for new AI-powered defense tools that automate triage and patch prioritization to handle the volume. Keep an eye on the evolution of AI-driven exploit tools that could leverage these disclosures faster than defenders can respond. Also, monitor how compliance frameworks adapt to the increased flood of vulnerabilities, especially when AI uncovers novel or previously unknown flaw categories.

AI Quick Briefs Editorial Desk