Google: vulnerability disclosures doubled in eight months of 2026

Google Threat Intelligence Group reports monthly vulnerability disclosures rose from 5,045 in January to 10,740 in August 2026. Half of the flaws surfaced by AI agents allow remote code execution, and 141 vulnerabilities were exploited in the wild from January to August versus 127 in all of 2025.

• Disclosures rose from 5,045 in January to 10,740 in August
• 141 flaws exploited in the wild in 8 months vs 127 in all of 2025
• 58% of AI-found bugs fall in the moderate risk tier
• 2,076 AI-software flaws tracked since 2025, over 1,500 this year