AIは1,061件の脆弱性を発見したが、攻撃者が悪用したのはわずか1.3%
vulncheckによると、2026年前半にAIが発見した脆弱性のうち実際に悪用されたのはわずか1.3%で、自動検出と実際の脅威との間の乖離を示しています。
vulncheck reports that of 1,061 vulnerabilities discovered via ai in the first half of 2026, only 14 were exploited, maintaining a 1.3% exploitation rate consistent with historical averages. anthropic's project glasswing illustrates this discrepancy, producing over 23,000 findings that resulted in just one confirmed attack. while total vulnerabilities rise and exploitation speed increases—with the median time to attack dropping from 120 to 80 days—ai security tools are flooding defenders with data. this suggests that current ai-assisted discovery methods lack precision, forcing analysts to sift through thousands of false positives to identify real dangers.