The vulnerabilities AI finds are the ones attackers want Attackers exploited a flaw found by an AI research agent within four days of its public disclosure, and they are exploiting more vulnerabilities overall, according to new research by Google Threat Intelligence Group (GTIG). The researchers examined vulnerability disclosure and exploitation data from January 2025 to August 2026. Disclosures doubled, exploitation stays rare Monthly CVE disclosures doubled in 2026, from 5,045 in January to 10,740 in August. Only 0.23% of the vulnerabilities disclosed this year, or about one in 431, were observed exploited in the wild. GTIG recorded 141 exploited vulnerabilities between January and August 2026, more than the 127 exploited in all of 2025. Zero-day exploitation grew from an average of 8…