Science & Tech · Cybersecurity · 2 hrs ago
Cybersecurity flaws hit record high as AI speeds up discovery
Mitre logged a record 48,244 cybersecurity flaws in 2025, up 2.4 times from 2021.
The number kept rising, with more than 35,000 flaws registered by June 2026.
Mitre is a U.S. nonprofit that shares information about weaknesses in software and computer systems so vendors and researchers can work on fixes.
The rise comes as AI tools help find security flaws faster, including models such as Anthropic's Claude Mythos.
Companies need to install software patches promptly, because unpatched flaws can be used for unauthorized access and attacks.
Recent unauthorized access and data leaks at Japanese companies, including the Times Car car-sharing service, have added to concerns, and Japan's government has urged businesses to strengthen security.
Some companies are falling behind on fixes, with a cybersecurity worker shortage cited as a reason; the data points to continued growth in reported flaws in 2026.
Publicly disclosed cybersecurity vulnerabilities reached a record 48,244 cases in 2025, according to data compiled by Mitre.
More than 35,000 cases had been registered by June 2026, with artificial intelligence helping identify flaws more quickly.
The rising numbers highlight cyberattack risks and the need for companies to apply software fixes promptly.
A security industry labor shortage is leaving many companies behind in implementing countermeasures, a Proofpoint representative said.
- Who
- Mitre compiled the data on disclosed cybersecurity vulnerabilities. Companies and software vendors are affected by the flaws.
- What
- Vulnerability disclosures reached a record high in 2025 and continued rising in 2026, as AI helped identify flaws.
- When
- The data covers 2017 through June 2026, with the record reported for 2025.
- Where
- The disclosures are recorded by Mitre; the article does not specify a single location for them.
- Why
- AI is helping identify flaws more quickly. The article also points to rising cyberattack risks and the need to fix vulnerabilities promptly.
This story does not have two clearly opposing sides.
The number of cases registered with Mitre remained in the 10,000s.
Mitre registered 20,161 cases.
OpenAI revealed ChatGPT, spurring other companies to offer similar services.
Registered cases rose to 40,077.
Mitre logged 48,244 cases, a record high.
More than 35,000 cases had been registered.
- 2025 disclosures
- 48,244 cases
- Change since 2021
- 2.4-fold increase
- By June 2026
- More than 35,000 cases registered
- 2024 disclosures
- 40,077 cases
- Data compiler
- Mitre
3 sources
What people are saying
Many companies are falling behind in implementing countermeasures due to a labor shortage within the security industry