AI is finding software vulnerabilities at an unprecedented rate. That’s a good thing.

WIRED reports that more than 66,000 CVEs were recorded by September 16, almost twice as many as last year. Microsoft patched 974 this month, Oracle released 1,448 fixes in July, and Mozilla used Anthropic’s Mythos model to find 271 Firefox vulnerabilities in a single sprint.

These vulnerabilities already existed. AI is helping us find and fix them faster, before attackers can exploit them. Now we need AI-assisted patching to scale as quickly as AI-assisted discovery.