Google: AI Is Changing the Pace and Profile of Vulnerability Discovery
Monthly CVE disclosures doubled in 2026, and half of AI-discovered vulnerabilities lead to remote code execution.
Monthly CVE disclosures doubled in 2026, and half of AI-discovered vulnerabilities lead to remote code execution.
Exploitation of CVE-2026-73570, an unauthenticated OS command injection in Zimbra, started shortly after patches rolled out.
Microsoft says phishing attacks abuse MSP360 and ScreenConnect to maintain redundant remote access on compromised Windows endpoints.