AI is accelerating the race between flaw discovery and exploitation
This is a DailyCyber.News update, brought to you by BareMetalCyber.com, for Thursday, October 1st, 2026.
Security teams are entering a faster and more crowded vulnerability cycle. Monthly disclosures increased from five thousand forty five in January 2026 to ten thousand seven hundred forty in August 2026. At the same time, observed exploitation rose from an average of 10.5 vulnerabilities per month in 2025 to 18 in 2026. Average zero-day exploitation increased more modestly, from 8 to 11 per month. The analysis also found that AI-assisted discovery produced proportionally more moderate-risk findings and more weaknesses that could lead to remote code execution.
The practical problem is prioritization. Raw disclosure volume makes unprioritized mass patching increasingly difficult and can pull attention away from the systems that present the greatest real-world risk. Only zero point two three percent of vulnerabilities disclosed in 2026 were observed in active exploitation, so context matters. Leaders should prioritize resilience based on exposure and business importance, not headline severity alone. Defenders should focus on known exploitation, internet-facing edge systems, high-impact outcomes, and reliable threat intelligence. The larger shift is toward faster discovery and weaponization, especially around exposed enterprise technology. Adopt risk-based patch triage that combines active-exploitation evidence, exposure, asset value, and operational impact.
For the sources and the full Daily Cyber newsletter, visit DailyCyber.News.
