AI 加速发现软件漏洞，Google 与 Oracle 修复量激增
AI 发现软件漏洞的速度已快于组织修复速度，攻击者也同步跟进。美国国家漏洞数据库截至 2026 年 7 月下旬记录 45,207 个漏洞，接近创纪录的 2025 年全年；Google 在 7 月一次更新中修复 433 个 Chrome 漏洞，一年前为 11 个，Oracle 则从 309 个增至 1,449 个。
AI is finding software flaws faster than organizations can fix them, and attackers are keeping pace.
> The US National Vulnerability Database logged 45,207 flaws by late July 2026, nearly matching all of record-setting 2025.
> Vendors show the same jump: Google fixed 433 Chrome bugs in one July update versus 11 a year earlier, and Oracle patched 1,449 against 309.
> This week’s PHP emergency showed the result, as banks, airlines and governments pulled sites offline over 2 AI-found flaws.
> Exploited flaws haven’t risen yet, largely because companies find most bugs themselves, as Google did with 401 of its 433.
> Palo Alto Networks’ Unit 42 estimates that more than a third of 22M internet-exposed systems vulnerable to the PHP flaws run software that can’t be patched, and expects upgrades to take months.
来源：rohanpaul_ai · x.com