AI가 1,061개 결함을 찾았지만 공격자가 실제 악용한 것은 1.3%뿐
VulnCheck에 따르면 2026년 초 AI로 발견된 취약점 중 실제 악용된 것은 1.3%에 불과하며, 이는 자동화된 탐지와 실제 위협 사이의 단절을 보여줍니다.
vulncheck reports that of 1,061 vulnerabilities discovered via ai in the first half of 2026, only 14 were exploited, maintaining a 1.3% exploitation rate consistent with historical averages. anthropic's project glasswing illustrates this discrepancy, producing over 23,000 findings that resulted in just one confirmed attack. while total vulnerabilities rise and exploitation speed increases—with the median time to attack dropping from 120 to 80 days—ai security tools are flooding defenders with data. this suggests that current ai-assisted discovery methods lack precision, forcing analysts to sift through thousands of false positives to identify real dangers.