While non-public frontier AI models, like Anthorpic’s Claude Mythos, have been shown to identify thousands of zero-day vulnerabilities across major operating systems, commercial models are also indicating progress in the discovery of software bugs. Forescout’s Vedere Labs found that just a year ago 55% of AI models failed basic vulnerability research and 93% failed exploit development tasks. Progress has been made however, and in 2026 the cybersecurity firm said all tested models’ complete vulnerability research tasks, and half can generate working exploits autonomously. As part of the research, 50 AI models were tested including commercial, open-source and underground. The most capable models Forescout tested – Claude Opus 4.6 and Kimi K2.5 – can now find and exploit vulnerabilities…