Security & Vulnerabilities (SEC) Intelligence Hub
Real-time accumulated intelligence, primary research, and executive digests for Security & Vulnerabilities (SEC).
VulnCheck reports 1.3 percent AI discovered exploits
Security firm VulnCheck reports that only 1.3 percent of AI-discovered software vulnerabilities were confirmed exploited in the first half of 2026, nearly matching exploitation rates for vulnerabilities found by traditional methods. Researcher Patrick Garrity tracked 1,061 AI-assisted vulnerabilities, of which fourteen were exploited. Anthropic’s Project Glasswing yielded over 23,000 findings, but just 126 became published entries and only one has been used in an attack. Although exploitation rates remain low, attacks occur sooner after disclosure: the median time dropped from 120 to 80 days, with about 23 percent exploited on or before disclosure, increasing urgency for faster defensive responses.
Read Original Source ↗CrowdStrike reports AI systems under direct attack
CrowdStrike’s 2026 Threat Hunting Report finds artificial intelligence systems are now being directly targeted, with attacks on AI infrastructure, model access and large language model services joining a broader surge in automated intrusions. The report says attackers adopt exploits within hours of disclosure, with most proof-of-concept code weaponized in under two days. China-linked and other groups rapidly abused React2Shell, npm packages, GitHub actions and cloud resources using stolen identities. CrowdStrike concludes adversaries are both using and attacking AI, favoring fewer, more complex campaigns. Technology, financial services and academia face rising pressure, with recommended responses including securing AI infrastructure and applying AI-driven detection at comparable speed.
Read Original Source ↗