[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fT91WwCSz_KpU9SK0H3X4Eux22A_j7ynKKzAldSPQE4U":3},{"article":4,"iocs":49,"watch_terms":56,"solutions":57,"lesson":145},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"66fae34f-6b87-4c24-a64f-370ee9c45b08","This year’s bug count just passed 100K","this-year-s-bug-count-just-passed-100k-9b8800","‘We don’t have a security problem anymore. We have a data problem now’","The number of disclosed Common Vulnerabilities and Exposures (CVEs) in 2026 has exceeded 100,000, more than double the previous year's total. This surge is largely attributed to the use of Artificial Intelligence in vulnerability hunting by major CVE Numbering Authorities. While the percentage of exploited CVEs remains low, the shrinking window between patch release and exploit development, also accelerated by AI, poses a significant challenge.","The number of disclosed software vulnerabilities in 2026 has surpassed 100,000, more than double last year's total.","https:\u002F\u002Fwww.theregister.com\u002Fsecurity\u002F2026\u002F11\u002F13\u002Fthis-years-bug-count-just-passed-100k\u002F5309882","https:\u002F\u002Fimage.theregister.com\u002F?imageId=262189&width=800","2026-11-13T20:52:17+00:00","2026-11-13T21:00:16.297823+00:00",8,[17,20,23,25,27,29],{"name":18,"type":19},"AI","technology",{"name":21,"type":22},"Microsoft","vendor",{"name":24,"type":22},"Oracle",{"name":26,"type":22},"GitHub",{"name":28,"type":22},"VulnCheck",{"name":30,"type":22},"CrowdStrike","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":31,"icon":33,"name":34,"slug":35},null,"Vulnerabilities","vulnerabilities",[37,39,44],{"category":38},{"id":31,"icon":33,"name":34,"slug":35},{"category":40},{"id":41,"icon":33,"name":42,"slug":43},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":45},{"id":46,"icon":33,"name":47,"slug":48},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[50,54],{"type":51,"value":52,"context":53},"malware","Vault Panda","China-linked threat actor group",{"type":51,"value":55,"context":53},"Genesis Panda",[21,24,30],{"controls":58,"vendors":144},[59,88,117],{"slug":60,"name":61,"problem":62,"products":63},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[64,72,80],{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":81,"vendor_name":82,"vendor_logo":83,"product_slug":84,"product_name":85,"url":86,"description":87},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":89,"name":90,"problem":91,"products":92},"patch-management","Automated patch management","Known holes get closed in days, not months.",[93,101,109],{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":97,"product_name":98,"url":99,"description":100},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":102,"vendor_name":103,"vendor_logo":104,"product_slug":105,"product_name":106,"url":107,"description":108},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":110,"vendor_name":111,"vendor_logo":112,"product_slug":113,"product_name":114,"url":115,"description":116},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"slug":48,"name":118,"problem":119,"products":120},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[121,129,137],{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"recorded-future","Recorded Future","\u002Fvendor-logos\u002Frecorded-future.png","recorded-future-cyber-operations","Recorded Future Cyber Operations","https:\u002F\u002Fwww.recordedfuture.com\u002Fproducts\u002Fcyber-operations","Threat intelligence built into security operations workflows, to prioritise alerts and act on threats before they arrive.",{"vendor_slug":130,"vendor_name":131,"vendor_logo":132,"product_slug":133,"product_name":134,"url":135,"description":136},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","google-threat-intelligence","Google Threat Intelligence","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fproducts\u002Fthreat-intelligence","Threat intelligence from Mandiant's frontline investigations, Google's threat analysts, open sources and Google's own visibility, in one service.",{"vendor_slug":138,"vendor_name":30,"vendor_logo":139,"product_slug":140,"product_name":141,"url":142,"description":143},"crowdstrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-adversary-intelligence","Falcon Adversary Intelligence","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fthreat-intelligence\u002F","Threat intelligence on the adversaries CrowdStrike tracks, built into the Falcon platform to detect, disrupt and defend against them.",[],{"slug":146,"title":147,"body":148,"framework_refs":149,"framework_notes":155},"cve-volume-hits-100k-ai-driven-discovery-outpaces-human-patching-capacity","CVE Volume Hits 100K: AI-Driven Discovery Outpaces Human Patching Capacity","The number of disclosed CVEs in 2026 has surpassed 100,000 — more than double the prior year — driven largely by AI-assisted vulnerability discovery by major CVE Numbering Authorities. While the raw exploit rate remains low, the danger lies in the shrinking window between patch release and weaponization, as adversaries also leverage AI to accelerate exploit development. Organizations that rely on manual triage and periodic patching cycles are increasingly exposed because they cannot keep pace with the sheer volume and velocity of new vulnerabilities. This surge fundamentally changes the risk calculus: even a small percentage of exploited CVEs across 100,000 disclosures represents a massive and growing attack surface. Effective vulnerability management must now be risk-driven, automated, and continuous rather than calendar-driven.",[150,151,152,153,154],"CIS Control 7: Continuous Vulnerability Management (v8)","NIST SP 800-53 RA-5: Vulnerability Monitoring and Scanning","NIST CSF 2.0 ID.RA-01: Vulnerabilities in assets are identified, validated, and recorded","NIS2 Article 21(2)(e)","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities",{"NIS2 Article 21(2)(e)":156,"CIS Control 7: Continuous Vulnerability Management (v8)":157,"NIST SP 800-53 RA-5: Vulnerability Monitoring and Scanning":158,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":159,"NIST CSF 2.0 ID.RA-01: Vulnerabilities in assets are identified, validated, and recorded":160},"This point explicitly covers vulnerability handling and disclosure practices, requiring entities to have systematic processes for managing the kind of high-volume vulnerability environment described in this incident.","CIS Control 7 requires organizations to continuously assess and remediate vulnerabilities, which directly addresses the challenge of triaging and patching at scale when CVE volume doubles year-over-year.","RA-5 mandates continuous vulnerability scanning and timely remediation tracking, which is the core operational response needed when the volume and velocity of new CVEs outpaces manual processes.","A.8.8 requires organizations to obtain timely information about technical vulnerabilities and take appropriate measures, directly applicable when AI-accelerated CVE discovery and exploit development compress the remediation window.","This category requires organizations to maintain an up-to-date picture of asset vulnerabilities, a prerequisite for prioritizing remediation when over 100,000 CVEs are disclosed in a single year."]