AI 发现大量安全漏洞但极少被利用
原标题：AI finds plenty of security flaws, but almost none of them get exploited
AI 摘要
VulnCheck 统计发现，2026 年上半年 AI 辅助发现的漏洞有 1061 个，但仅 14 个被确认利用，占比 1.3%，与整体漏洞利用率相当。Anthropic 的 Project Glasswing 产出超 2.3 万条发现，最终仅 126 条公开，1 次确认攻击。攻击速度加快，半数漏洞在披露后 80 天内被利用，较上年的 120 天缩短。内容管理系统是主要攻击目标，AI 产品本身成为新兴攻击面。
正文节选
AI finds plenty of security flaws, but almost none of them get exploited VulnCheck counted how often the security flaws that AI turns up are ever used in an attack. For the first half of 2026, Patrick Garrity counts 1,061 vulnerabilities traced to AI-assisted discovery. Fourteen showed confirmed exploitation. That's 1.3%, roughly the same rate as vulnerabilities overall. Anthropic's Project Glasswing produced more than 23,000 findings, which led to 126 published entries and a single confirmed at