AI finds plenty of security flaws, but almost none of them get exploited

A study by VulnCheck found that while artificial intelligence is frequently used to identify software vulnerabilities, only 1.3 percent of the 1,061 flaws discovered by AI in the first half of 2026 resulted in confirmed attacks. This exploit rate is identical to that of vulnerabilities found through traditional methods. However, the time between the discovery of a vulnerability and the release of an exploit has continued to decrease, signaling a shift in the speed at which attackers capitalize on security gaps.