# AI is finding bugs faster than humans can fix them

> AI tools are uncovering software vulnerabilities at record speed, but security teams lack the resources to patch them all.
- Title: AI is finding bugs faster than humans can fix them · WIRED
- Summary: AI tools are uncovering software vulnerabilities at record speed, but security teams lack the resources to patch them all. The real problem isn't finding…
- Keywords: breaking, cybersecurity, vulnerabilities, cve, software patching, bug discovery, open source, microsoft, oracle, google chrome, mozilla firefox, finding
- Source: WIRED — https://wired.com/story/kernel-panic-ai-vulnerability-explosion
- Author: Matt Burgess
- Published: 2026-09-19T11:00:00+00:00
- Read time: 1 min
- Topics: breaking, ai, cybersecurity, vulnerabilities, cve, software patching, bug discovery, open source, microsoft, oracle, google chrome, mozilla firefox
## AI found a vulnerability tsunami
Microsoft issued 974 patches this month alone, a new record. Oracle shipped 1,448 patches in July versus 309 last year. Google Chrome released 1,072 fixes in two versions.
## The numbers doubled in one year
Total CVEs recorded hit 66,401 as of this week. By September last year, the count was 33,512, almost half. All of 2022 saw just 25,000 CVEs.
## AI is helping attackers too
The real fear is that defenders can't patch fast enough while attackers use AI to find novel vulnerabilities on their own. Britain's National Cyber Security Center warns that finding vulnerabilities alone doesn't improve security.

> Just finding vulnerabilities does nothing to improve your security.
## Patching is the real bottleneck
Security experts say the problem isn't finding bugs, it's that patch teams are understaffed and can't scale quickly. Slow adoption of patches already gave attackers advantages before AI arrived.

> Discovery scales with compute. Remediation scales with people, and people are the part you can't buy more of in a quarter.
## An AI slowdown won't stop this
Even if the industry agrees to slow frontier AI development, the vulnerability explosion from existing AI tools has already arrived. The damage from this wave will continue regardless.
## Key takeaway

The real problem isn't finding vulnerabilities, it's that patch teams can't keep up with the discovery rate, leaving systems exposed.