AI finds plenty of security flaws, but almost none of them get exploited

A report from VulnCheck revealed that only 14 out of 1,061 security vulnerabilities discovered by AI in the first half of 2026 faced confirmed attacks, representing just 1.3%. This rate matches the overall vulnerability exploitation rate, but the time to exploit these vulnerabilities is decreasing, with the median dropping from 120 days to 80 days. This indicates that while AI can identify numerous vulnerabilities, very few are exploited, raising questions about the effectiveness of current security tools and how they can be improved to address rising threats.