Exploits and vulnerabilities in Q2 2026

Q2 2026 saw a significant surge in the number of registered vulnerabilities, largely driven by the increasing adoption of AI tools for vulnerability discovery. Researchers are now publishing exploits for vulnerabilities *before* they are officially assigned CVEs, leading to a faster exploitation cycle. This resulted in a notable increase in vulnerabilities targeting both Windows and Linux systems, with a particular focus on the Linux caching subsystem. Furthermore, a concerning trend emerged – the proliferation of AI-generated vulnerability reports and associated malware, intended to mislead researchers and delay the detection of genuine vulnerabilities. The report highlights a growing reliance on C2 frameworks like Sliver and Havoc in APT attacks, and the exploitation of vulnerabilities related to AI-based tools.