Google GTIG: AI-Found Software Vulnerabilities Enable Remote Code Execution 50% of the Time, Nearly 2x Human-Found CVEs

Google's Threat Intelligence Group reports that 50% of vulnerabilities it tagged as likely AI-discovered resulted in remote code execution between January and August 2026, versus 26% of other CVEs. GTIG also found CVE disclosures doubled from 5,045 in January 2025 to 10,740 in August 2026, with one AI-found BeyondTrust flaw (CVE-2026-1731) weaponized within four days. The group warns that AI defenders are surfacing precisely the memory-corruption and logic bugs attackers want.