a16z: Monthly critical CVEs at 21 major software firms jumped from under 100 to 600+
FinanceYF5 · x · 2026-09-07
A16z's analysis of 21 major software companies including Apple, AWS, Microsoft and Google shows monthly reported critical vulnerabilities never exceeded 100 over the past four years — but since this spring the figure has jumped to over 600 per month.
The surge marks an unprecedented inflection point for the cybersecurity industry, likely tied to expanding software surface area and faster development cycles.
More from Safety
- India's UPI payment system has been running on an expired cert since Sep 2025 — kingslyj · 2026-10-23
- Claude-assisted audit finds Home Assistant sensors leaking email and street name in User-Agent — adrianscottcom · 2026-10-23
- Cloudflare CTO: token spend over next 18 months will go to security, not engineering — No Priors · 2026-10-23
- UK government spent just £13,000 on AI models that found 500 security vulnerabilities — S_OhEigeartaigh · 2026-10-23
- US Treasury proposes banning all American investment in Chinese AI companies — rohanpaul_ai · 2026-10-23
- rez0 claims he may have submitted nearly a third of all Google BugSwat bugs — rez0__ · 2026-10-23