Publicly disclosed cybersecurity vulnerabilities reached a record high globally in 2025 and continued to surge through the first half of 2026, driven by artificial intelligence tools that accelerate the discovery process. According to data collected by the Mitre Corporation, a U.S.-based nonprofit organization that manages federally funded research and development centers, worldwide software vulnerabilities climbed to over 48,000 cases in 2025—a 2.4-fold increase compared to 2021 totals.
Surging Vulnerability Numbers Across Global Markets
The upward trajectory in security flaws shows no signs of slowing down. Mitre Corporation reported that between January and the end of June 2026, researchers and automated systems already logged more than 35,000 vulnerability cases. This rapid accumulation highlights escalating risks for enterprise networks and underscores the critical need for prompt software patches.
Historical data from the organization shows a distinct pre-AI baseline. Between 2017 and 2020, annual reported incidents hovered around 10,000. That figure jumped to 20,161 in 2021. Following OpenAI’s public release of ChatGPT in November 2022, the technology sector saw a proliferation of generative AI tools. By 2024, annual vulnerability disclosures climbed to 40,077, before peaking at 48,244 in 2025.
AI-Driven Discovery and Enterprise Staffing Shortages
Modern artificial intelligence models are actively transforming how security researchers scan for and identify software flaws. Advanced large language models and security-focused platforms, such as Anthropic’s Claude Mythos, are frequently deployed to find deep-seated code weaknesses faster than traditional human audits.
Yet this automated acceleration creates severe operational bottlenecks. Yukimi Sota of Proofpoint’s Japan branch noted that many corporations fall behind on implementing defensive remedies and patches because the cybersecurity sector suffers from a persistent labor shortage.
Most notably, the Times Car ride-sharing service suffered a data breach exposing personal information belonging to approximately 6.6 million users. In response to these security failures, the Japanese government urged businesses across the country to drastically upgrade their defensive protocols and deploy software patches immediately.
Related reading