AI-discovered vulnerabilities: is your remediation pace keeping up?

TL;DR: AI-assisted vulnerability discovery has accelerated faster than exploitation, according to Automox, with five of the ten largest single-day CVE publication batches since 2017 landing in the last seven weeks and only one documented AI-developed zero-day campaign stopped before launch. The limiting factor is now governance cadence, not discovery capacity, because remediation still lags behind the pace of exposure.

Editorial analysis by NHI Mgmt Group, based on content published by Automox: “Frontier-Pace Governance”.

By the numbers:

• Last year, only 26% of known exploited vulnerabilities were fully remediated, according to Automox.
• Vulnerability exploitation reached 31% of initial access in the Verizon 2026 DBIR, according to Automox.

Key questions

Q: How should teams respond when vulnerability discovery outpaces remediation capacity?

A: Treat remediation as an access-control problem as well as an engineering one.

Q: Why does faster vulnerability discovery create more risk for security programmes?

A: Because discovery speed amplifies the gap between identifying a weakness and proving it is fixed.

Q: What breaks when remediation governance cannot keep pace with patch velocity?

A: Asset and identity inventories become stale, change queues back up, and the systems meant to reduce risk cannot operate at the cadence required.

Practitioner guidance

• Audit remediation throughput against disclosure pace Compare time-to-triage, time-to-approve, and time-to-deploy against the current rate of vulnerability publication so governance bottlenecks are visible.
• Map privileged change paths for patch automation Identify which service accounts, deployment bots, and admin roles can actually execute patches, then remove approval friction that delays safe execution.
• Prioritise edge-device exposure first The article ties exploitation growth to known CVEs on edge devices, so those systems should receive the shortest closure windows and the most aggressive compensating controls.

Bottom line: AI-assisted vulnerability discovery is increasing exposure faster than many programmes can close it, which turns remediation throughput into a core security control.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →