Critical vulnerability reports are said to top 600 a month across 21 software companies

A16z says reported critical vulnerabilities across 21 major software companies, including Apple, AWS, Microsoft and Google, never topped 100 a month for four years but rose above 600 a month since spring 2026. In a separate post, a user predicts AI will add security work through vibe-coded issues and agentic attacks, while defensive AI agents could help protect code, systems and data.