“AI-assisted vulnerability discovery in 2026 is creating larger haystacks, but it isn’t finding more needles.”
This month’s Patch Tuesday fixed 974 CVEs, 113 of them critical, with two zero-days already being exploited before the patch shipped. Tenable’s Satnam Narang says AI-assisted scanning is turning up more bugs, not fewer, which says less about better tooling and more about how much broken code was already sitting in Windows. Patch it this week or be next week’s incident report.