
AI-Era CVE Trends: Discovery and Exploitation
Google's GTIG data shows CVE disclosures doubled in 2026, n-day exploitation is accelerating, and AI stacks are now targets. See what it means and how to respond.
Topic
Every article tagged CVE, newest first.

Google's GTIG data shows CVE disclosures doubled in 2026, n-day exploitation is accelerating, and AI stacks are now targets. See what it means and how to respond.

Critical Ingress-NGINX vulnerabilities threaten Kubernetes security. Learn how to mitigate three of the vulnerabilities CVE-2025-24514, CVE-2025-1097, and CVE-2025-1098 ⚡ Updated Feb 21 2026 for ingress-nginx retirement

Critical vulnerabilities (CVE-2026-24512 & others) discovered in Kubernetes Ingress-NGINX allow arbitrary code execution. Upgrade to v1.13.7 or v1.14.3 immediately to secure your cluster.
Keep reading

GitHub Package Firewall brings install-time npm policy gates, SLSA attestation checks, and version cooldowns to AI coding agents and CI/CD runners.

Node.js CVE-2026-111497 exposes Brotli decoding to potential RCE. Check affected versions, fetch() exposure, WAF limits, and the October 2026 patch checklist.

PHP2Shell (CVE-2026-109618 & CVE-2026-109619) exposes 70% of the web to unauthenticated PHP RCE and memory leaks. Check fixed versions, IOCs, and mitigations.