AI 加速漏洞发现速度，2026 年漏洞数量逼近 2025 年全年纪录
安全圈的朋友该看看：AI 挖漏洞快到修复跟不上，PHP 那两个漏洞都让银行下线了，数字挺吓人。
美国国家漏洞数据库截至 2026 年 7 月底已记录 45,207 个漏洞，几乎追平创纪录的 2025 年全年数量。厂商侧同样出现激增：Google 在一次 7 月更新中修复了 433 个 Chrome 漏洞，一年前仅 11 个，Oracle 补丁数从 309 涨到 1,449。本周 PHP 紧急事件导致银行、航空公司和政府网站下线，起因是 2 个由 AI 发现的漏洞。目前被实际利用的漏洞尚未上升，主要因为企业大多自己发现漏洞，Google 的 433 个中有 401 个由自查发现。Palo Alto Networks 的 Unit 42 估计，受 PHP 漏洞影响的 2200 万台暴露系统中，超过三分之一运行无法打补丁的软件，升级预计需要数月。
AI is finding software flaws faster than organizations can fix them, and attackers are keeping pace.
> The US National Vulnerability Database logged 45,207 flaws by late July 2026, nearly matching all of record-setting 2025.
> Vendors show the same jump: Google fixed 433 Chrome bugs in one July update versus 11 a year earlier, and Oracle patched 1,449 against 309.
> This week’s PHP emergency showed the result, as banks, airlines and governments pulled sites offline over 2 AI-found flaws.
> Exploited flaws haven’t risen yet, largely because companies find most bugs themselves, as Google did with 401 of its 433.
> Palo Alto Networks’ Unit 42 estimates that more than a third of 22M internet-exposed systems vulnerable to the PHP flaws run software that can’t be patched, and expects upgrades to take months.
