AI-found vulnerabilities

Week of Nov 94

• Nov 10CapabilityMicrosoft's November Patch Tuesday credits its one exploited zero-day, an Outlook spoofing flaw, to a researcher using Claude
• Nov 10PolicyENISA's report on the state of cybersecurity in the Union says frontier AI is industrialising vulnerability discovery and keeps the EU threat level at substantial
• Nov 9MarketsQualys's chief executive tells analysts a recent Microsoft Patch Tuesday carried 1,414 new vulnerabilities, against 93 "before the advent of Frontier AI"
• Nov 9MarketsCyber-risk analysts tell Insurance Journal PHP2Shell is a long-tail risk for insurers, and that AI helped turn decade-old flawed code into a working exploit

Week of Nov 25

• Nov 8CapabilityTorvalds says much of Linux 7.4-rc2 was driven by AI fixes, and relays the eBPF lead's view that fixes there now arrive faster than new reports
• Nov 6PolicyJapan's government compiles an emergency cyber package, with the cabinet deciding to spend ¥10 billion from reserve funds and a public-private cyber rescue team planned
• Nov 5PolicyJapan plans to ask US AI developers for earlier access to undisclosed software vulnerabilities, Nikkei reports
• Nov 4CapabilityOpenAI says an upcoming model produced working root exploits for 948 distinct Linux kernel flaws in a single run, for about $1.2 million in API credits
• Nov 3CapabilityXen credits Anthropic's Claude with finding flaws that let a malicious guest read and write other virtual machines' memory, including Dom0

Week of Oct 268

• Oct 29CapabilityAn open-weight model turned published Firefox fixes into working exploits before the fixes reached users, Epoch AI says
• Oct 28AttacksPalo Alto Networks confirms the PHP2Shell flaws are being exploited against exposed firewall management interfaces
• Oct 27AttacksExploit traffic against the Brotli flaw is now seen in the wild, from an address earlier linked to PHP2Shell
• Oct 27CapabilityAnthropic says an unreleased Claude research model wrote working exploit chains for Chrome, Safari, Android, Windows and Linux
• Oct 27CapabilityMozilla's Firefox 159 advisory credits 41 of its 167 fixed vulnerabilities to OpenAI, 34 of them to the Codex Security agent
• Oct 26CapabilityFortinet says frontier AI models found critical flaws in its own products, and that about 40% of what they reported was real
• Oct 26PolicyJapan's prime minister orders AI-assisted vulnerability assessments and an emergency cyber package within about two weeks
• Oct 26AttacksDream says a suspected China-nexus actor chained the PHP2Shell flaws with a kernel bug to root 25 PAN-OS firewall and management servers, with Claude Code in its attack infrastructure

Week of Oct 198

• Oct 25AttacksAttackers used agentic AI platforms after breaking into a European government entity through the PHP flaws, Unit 42 reports
• Oct 24AttacksHoneypots recorded 35 shells launched through the AI-found PHP flaws, moving exploitation from probes to working code execution
• Oct 23CapabilityOpenAI says its AI red-team exercises found an unauthenticated code-execution flaw in Google's Brotli library
• Oct 21CapabilityWiz says AI models helped it find two remote-code-execution flaws in nearly every PHP release of the last decade
• Oct 21AttacksAmazon logged a PHP2Shell exploit attempt four days before disclosure, and cannot say how the actor knew
• Oct 21DefenseCISA told organisations to patch the PHP flaws immediately and said it had not observed exploitation
• Oct 20CapabilityA researcher recovered eight certificate authority private keys in under a second, and says Claude did it from one prompt
• Oct 20Defensecurl moves low- and medium-severity vulnerability reports into the open, saying it must act to survive a flood of reports The Register ties to AI

Week of Oct 124

• Oct 15MarketsBank of America's chief executive puts remediation at “a couple of hundred million plus” after Anthropic's Mythos exposed flaws in the bank's software
• Oct 13DefenseMicrosoft's October update runs past 1,400 CVEs, and the analyst counting them says AI is partly to blame but is not creating the bugs
• Oct 13CapabilityXBOW says its agents and four researchers built a three-bug Chrome chain to remote code execution in six days, for Google's first $250,000 full-chain award
• Oct 12CapabilityTencent says its own multi-agent system found a high-severity Linux kernel flaw that hands a local user root

Week of Oct 54

• Oct 8DefenseAnthropic puts engineers behind eleven critical-infrastructure partners and starts sending open-source maintainers vulnerability reports no human has read
• Oct 7CapabilityA third of the AI patches that stop the crash still fail the maintainer’s own test, and every one of thirteen surveyed patching benchmarks misses at least one way to inflate a score
• Oct 6DefenseIBM and Red Hat say an AI-assisted remediation programme found and fixed more than 400 previously unknown flaws in Java libraries
• Oct 5DefenseGoogle has stopped accepting product vulnerability reports into its open-source bug bounty, citing a rise in automated submissions (via Help Net Security)

Week of Sep 287

• Oct 2CapabilityAnthropic's disclosure dashboard counts 6,157 vulnerabilities found with its models across 591 open-source projects, 516 of them patched
• Oct 2AttacksA flaw an AI model found is being exploited in the wild — the second of 286 CVEs a tracker attributes to Mythos and Project Glasswing
• Oct 1CapabilityMicrosoft says the threat landscape has moved toward autonomous execution and weaponisation now takes under a day
• Sep 30CapabilityGoogle finds half of AI-discovered vulnerabilities give remote code execution, twice the rate of the wider CVE pool
• Sep 30CapabilityHorizon3 says Anthropic's Mythos linked a predictable random number generator to a separate leak endpoint, reached for an SMT solver unprompted and wrote the working exploit
• Sep 29DefenseOpenAI launches Codex Security Cloud, a repository-scanning product for defenders
• Sep 28CapabilityGitHub's security team says its open-source AI agent found 24 vulnerabilities in Android apps

Week of Sep 212

• Sep 24CapabilityGoogle says an internal AI agent found more than 500 cross-site scripting flaws across its own web applications
• Sep 24DefenseGoogle and Wiz launch Scan for Good, running AI vulnerability scans for public services and critical infrastructure with a human validating every finding

Week of Sep 142

• Sep 16CapabilityCisco says frontier AI models helped find six Identity Services Engine flaws, four of them rated 9.9 or above
• Sep 16AttacksCisco confirms active exploitation of a maximum-severity authentication bypass in Identity Services Engine

Week of Sep 72

• Sep 8CapabilitySecurity firm says AI helped it find a WeChat zero-click flaw and write a working remote-code exploit in about two days
• Sep 8DefenseMicrosoft ships its largest Patch Tuesday on record, and the analysts counting it say AI discovery is not producing more exploited flaws

Week of Aug 311

• Sep 3CapabilityMost of the flaws Anthropic's model reported have never been checked by anyone outside the lab

Week of Aug 176

• Aug 20DefenseVulnCheck says AI write-ups and placeholders now outnumber working exploits in public proof-of-concept repositories
• Aug 18CapabilityGoogle says its agentic vulnerability-discovery system found 100-plus critical flaws in two days
• Aug 18CapabilityRapid7 counts 8,539 new high and critical CVEs in the second quarter, double the year before
• Aug 18AttacksA SharePoint flaw found with an AI agent enters CISA's exploited-vulnerabilities catalog
• Aug 18MarketsA carrier's security arm attributes a 36% jump in disclosed vulnerabilities to agentic AI
• Aug 17CapabilityWiz's autonomous red agent found a CI script-injection flaw that GitHub Advanced Security scanned and missed

Week of Aug 104

• Aug 14CapabilityMETR finds vulnerability disclosures rising far faster than confirmed exploitation
• Aug 12PolicyNIST opens a request for information on modernizing the National Vulnerability Database in the age of AI
• Aug 11CapabilitySecurity firm says publicly available AI models let it build a zero-click Zoom RCE in under a day
• Aug 11CapabilityRapid7 used an AI agent to help chain two SharePoint flaws into unauthenticated remote code execution

Week of Aug 33

• Aug 6CapabilityOff-by-1 Labs: about three in four AI-generated vulnerability patches are broken or incomplete
• Aug 5CapabilityPortSwigger's HTTP Terminator: an AI-assisted pipeline invents novel HTTP desync attacks and a live Apache zero-day
• Aug 4CapabilityUnit 42 says its NOVA system found 14,090 unknown vulnerabilities across 3,915 open-source projects in two months

Week of Jul 273

• Jul 31CapabilityEpoch AI counts about 2,500 high and critical CVEs disclosed in July, five times the pre-Mythos record
• Jul 28CapabilityVulnCheck finds AI-discovered vulnerabilities are exploited in the wild at the same low rate as any other
• Jul 28PolicyThe CVE Program lets two AI labs assign CVE identifiers in a closed six-month pilot

Week of Jul 201

• Jul 23CapabilityAn autonomous agent found three critical Microsoft remote-code-execution flaws

Week of Jul 132

• Jul 14PolicyWhite House launches 'Gold Eagle', a Treasury-led clearinghouse for AI-discovered cybersecurity vulnerabilities
• Jul 14DefenseMicrosoft's July Patch Tuesday fixes a record 570 flaws, including multiple Copilot and Azure AI vulnerabilities

Week of Jul 61

• Jul 9CapabilityMicrosoft says AI-driven scanning is changing the pace of vulnerability discovery, and Windows patch volume with it