a16z: Monthly critical CVEs at 21 major software firms jumped from under 100 to 600+

FinanceYF5 · x · 2026-09-07

A16z's analysis of 21 major software companies including Apple, AWS, Microsoft and Google shows monthly reported critical vulnerabilities never exceeded 100 over the past four years — but since this spring the figure has jumped to over 600 per month.

The surge marks an unprecedented inflection point for the cybersecurity industry, likely tied to expanding software surface area and faster development cycles.

Related event: a16z: 87% of Exploited Vulns Attacked Same Day as Disclosure(4 posts)→

Original post →

More from Safety

Safety channel →