AI FINDS FLAWS, BUT EXPLOITS REMAIN RARE

AI DESK■ 1 MIN READ

SUN, AUG 2, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

AI-discovered vulnerabilities are rarely exploited in the wild, according to VulnCheck data. Just 1.3 percent of AI-found security flaws see confirmed attacks.

VulnCheck analyzed 1,061 vulnerabilities identified by AI systems in the first half of 2026. Only 14 resulted in confirmed exploits—a rate matching traditional vulnerability discovery methods. However, attackers are moving faster when they do strike. The median time between vulnerability discovery and active exploitation dropped from 120 days to 80 days. The findings suggest AI security tools are effective at identifying flaws, but the gap between discovery and real-world attacks remains large. Most vulnerabilities never face exploitation attempts, whether found by AI or conventional means. The accelerating exploit timeline raises separate concerns. Security teams have less time to patch critical flaws before attackers weaponize them, despite the overall rarity of AI-discovered vulnerabilities being targeted.

■ SOURCES

► The Decoder

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

P661HEDGE FUNDS TARGETED IN BLACKFILE-LINKED ATTACK WAVE

Cyberattacks against hedge funds and private equity firms have been attributed to UNC6671, an extortion group connected to the BlackFile threat actors. The campaign represents an escalating threat to the financial sector.

2H AGO— Security Desk

P659CLICKFIX ATTACKS DEPLOY MACOS MALWARE FOR CRYPTO THEFT

A Go-based malware distributed through ClickFix attacks is targeting macOS users to steal cryptocurrency, passwords, and Apple Keychain data. The infostealer campaign combines social engineering with credential harvesting.

4H AGO— Industry Desk

P653EX-NSA CHIEF: WATER SYSTEMS SHOULD STAY OFFLINE

A former NSA official has warned against connecting water infrastructure controllers to the internet following suspected Iranian cyberattacks on U.S. water systems.

9H AGO— Industry Desk

P641POLISH COURTS, HOSPITALS, AIRPORTS FACE HACK RISKS

Security researchers scanning Polish government websites discovered critical vulnerabilities that could expose courts, hospitals, and airports to cyberattacks. The vulnerabilities stem from common software used to manage and display web content.

12H AGO— AI Desk

◄ BACK TO NEWS

AI FINDS FLAWS, BUT EXPLOITS REMAIN RARE

■ MORE FROM THE SECURITY DESK

■ SUBSCRIBE TO THE DAILY BRIEF