Google: Vulnerability disclosures double to 10,000 per month as AI fuels exploitation

Google’s Threat Intelligence Group reports a marked increase in vulnerability disclosures and active exploitation in 2026, driven by AI-assisted discovery and rapid weaponization of n-days. The report cites CVE-2026-1731—autonomously found by Hacktron AI—as an example where threat clusters weaponized the flaw within days, conducting privilege escalation, data exfiltration, and deploying payloads such as SNOWLIGHT, SPARKRAT, and cryptominers; it warns that AI agents are speeding the targeting of critical perimeters and enterprise services.