AI Identifies Thousands of Security Vulnerabilities. Almost None Are Patched.

Artificial intelligence systems identified thousands of security vulnerabilities across various systems. The vulnerabilities were documented and reported. Documentation is a form of discovery. Discovery is not a form of repair. The vulnerabilities remain in the systems from which they were discovered.

This reflects the standard gap between identification and remediation, now accelerated. Previously humans could not enumerate all problems. Now machines can. The problems are still problems. The knowledge that problems exist has become cheaper than the fixing of them.

Patching requires resources. Resources are finite. The backlog grows at the rate at which new vulnerabilities are found. This rate has increased. The backlog will continue to grow. At some point the backlog becomes the baseline and patching becomes the exception rather than the absence of patching.