Just 1% of AI-Discovered Vulnerabilities Exploited in the Wild, Research Shows

Infosecurity Magazine

July 29, 2026 at 10:15 AM

Overview

A recent study by VulnCheck revealed that only 1% of vulnerabilities identified by AI are being actively exploited in the wild. This suggests that while AI tools are effective in discovering vulnerabilities, they are not yet a significant factor in actual exploitation. The researcher emphasized that the current impact of AI is more beneficial for vulnerability research than for attackers looking to exploit these weaknesses. This discrepancy raises questions about the readiness of organizations to patch vulnerabilities before they can be exploited. As the technology develops, companies should remain vigilant and proactive in addressing discovered vulnerabilities to prevent future attacks.

Key Takeaways

Action Required: Organizations should implement regular vulnerability assessments and patch management processes to address discovered vulnerabilities.
Timeline: Newly disclosed

Original Article Summary

For now, the use of AI benefits vulnerability research more than vulnerability exploitation, a VulnCheck researcher said

Impact

Not specified

Exploitation Status

No active exploitation has been reported at this time. However, organizations should still apply patches promptly as proof-of-concept code may exist.

Timeline

Newly disclosed

Remediation

Organizations should implement regular vulnerability assessments and patch management processes to address discovered vulnerabilities. Continuous monitoring of AI findings is recommended to ensure timely remediation of potential threats.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Exploit, Vulnerability, Patch.

Read Original Article

Related Coverage

FBI disrupts proxy network enabling Chinese espionage operations

BleepingComputer

The FBI has taken action against a proxy network that was facilitating Chinese espionage operations. This network acted as a technical 'quartermaster', providing tools for reconnaissance and management of proxy servers used in cyber spying activities. The disruption aims to dismantle the infrastructure that allowed these operations to flourish, targeting the methods that adversaries used to conceal their actions. This incident is significant as it reflects ongoing efforts to counteract foreign cyber threats and protect sensitive information. It emphasizes the importance of vigilance against cyber espionage tactics that can undermine national security and compromise data integrity.

Aug 26, 2026

Snowflake ends service-account passwords. Now comes the hard part

BleepingComputer

Snowflake has decided to discontinue password authentication for its legacy service accounts, which means organizations will need to switch to passwordless authentication methods. This change aims to enhance security by reducing reliance on passwords, but it poses significant challenges for companies. They must identify what each service account is used for, who manages them, and the level of access each account requires. This process is crucial to ensure that the migration to passwordless systems does not disrupt operations or leave any security gaps. As organizations navigate this transition, they will need to carefully assess their service account configurations and access controls.

Aug 26, 2026

CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing

The Hacker News

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) recently completed red team assessments on two critical infrastructure organizations, both of which were compromised at the domain level. Despite using similar tactics, only one organization detected the intrusion. This stark difference in defensive outcomes raises concerns about the readiness of critical infrastructure sectors to withstand cyberattacks. The findings emphasize the need for improved security measures and threat detection capabilities within these organizations to better protect against potential breaches that could disrupt essential services. CISA's assessment serves as a crucial reminder of the vulnerabilities that exist within critical infrastructure and the ongoing need for vigilance in cybersecurity practices.

Aug 26, 2026

Average Cyber Insurance Losses Increase Despite Fewer Claims

Infosecurity Magazine

Chubb has reported a significant rise in the costs associated with cyber insurance claims in the U.S., primarily driven by an increase in privacy litigation. While the number of claims has decreased, the financial impact of each claim has surged, suggesting that legal challenges related to data privacy are becoming more complex and costly for companies. This trend indicates that businesses may face higher premiums and financial risks as they navigate the evolving landscape of privacy laws and regulations. The situation underscores the importance of strong cybersecurity measures and compliance strategies for organizations aiming to mitigate these risks. As companies continue to adapt to changing legal requirements, understanding the implications of privacy litigation is crucial for effective risk management.

Aug 26, 2026

Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run Code

The Hacker News

Researchers at the CERT Coordination Center have identified two serious vulnerabilities in Kaltura's HTML5 video player library. These flaws, tracked as CVE-2026-19913 and CVE-2026-19912, allow remote, unauthenticated attackers to read arbitrary files from a server and execute malicious code. Both vulnerabilities stem from unsafe deserialization within the mwEmbedLoader.php endpoint of the mwEmbed player. This poses a significant risk for any organization using Kaltura's video services, as attackers could exploit these weaknesses to gain unauthorized access to sensitive data or disrupt operations. As of now, there are no known patches or fixes available for these vulnerabilities, making it crucial for affected users to take immediate action to protect their systems.

Aug 26, 2026

CISA: Over 100 Internet-Exposed Water Systems Targeted in July Cyberattacks

SecurityWeek

In July, over 100 water systems connected to the internet were targeted by cyberattacks linked to Iranian hackers, according to the Cybersecurity and Infrastructure Security Agency (CISA). These attacks raise concerns about the security of critical infrastructure, particularly as many water systems operate with limited cybersecurity measures. CISA has released guidance aimed at reducing internet exposure to prevent similar incidents in the future. The agency emphasizes the importance of securing these systems to protect public safety and ensure the reliability of water services. As cyber threats continue to evolve, it is crucial for organizations to implement robust cybersecurity practices.

Aug 26, 2026