AI-generated code is driving a rising CVE trend in March 2026
Target Trend
Summary
Hide ▲
Show ▼
AI-generated code is driving a rising CVE trend, with 35 disclosures in March 2026 showing a material increase in flaws across public advisories and open-source projects. Counts rose from six in January to 15 in February, suggesting the problem is accelerating as AI-assisted coding spreads. The trend matters because it ties developer automation directly to more exploitable software risk.
Related Happenings
Microsoft MDASH enters limited private preview for AI-driven vulnerability discovery at scale
Security Tool/Service
First: 13.05.2026 16:46
Last: 13.05.2026 16:46
Sources 1
About this happening:
Microsoft's **MDASH** has entered **limited private preview**, adding a new **AI-driven vulnerability discovery** service that can validate and prove exploitable defects at scale....
Microsoft MDASH enters limited private preview for AI-driven vulnerability discovery at scale
Security Tool/ServiceAbout this happening: Microsoft's **MDASH** has entered **limited private preview**, adding a new **AI-driven vulnerability discovery** service that can validate and prove exploitable defects at scale....
Prominent cybercrime threat actors AI-assisted zero-day exploitation campaign
Campaign
First: 11.05.2026 16:00
Last: 11.05.2026 16:00
Sources 1
About this happening:
An **AI-assisted zero-day exploitation campaign** was planned by **prominent cybercrime threat actors**, but the effort was **disrupted before deployment** and did not reach its i...
Prominent cybercrime threat actors AI-assisted zero-day exploitation campaign
CampaignAbout this happening: An **AI-assisted zero-day exploitation campaign** was planned by **prominent cybercrime threat actors**, but the effort was **disrupted before deployment** and did not reach its i...
Google GTIG analysis of adversary AI use for exploit development and attack orchestration
Technical Analysis
First: 11.05.2026 16:00
Last: 11.05.2026 16:00
Sources 1
About this happening:
**Google Threat Intelligence Group** published findings showing **adversaries using AI** for **exploit development** and **attack orchestration**, signaling that model-assisted tr...
Google GTIG analysis of adversary AI use for exploit development and attack orchestration
Technical AnalysisAbout this happening: **Google Threat Intelligence Group** published findings showing **adversaries using AI** for **exploit development** and **attack orchestration**, signaling that model-assisted tr...
AI-assisted cyber trend driving more malicious packages, faster exploit development, and slower remediation
Target Trend
First: 04.05.2026 14:58
Last: 04.05.2026 14:58
Sources 1
About this happening:
**AI-assisted cybercrime** is lowering the barrier to entry while **malicious package counts**, **exploit speed**, and **remediation lag** all worsen across software supply chains...
AI-assisted cyber trend driving more malicious packages, faster exploit development, and slower remediation
Target TrendAbout this happening: **AI-assisted cybercrime** is lowering the barrier to entry while **malicious package counts**, **exploit speed**, and **remediation lag** all worsen across software supply chains...
Anthropic Claude Code usage-limits bug causing faster exhaustion
Service Disruption
First: 01.04.2026 03:32
Last: 01.04.2026 03:32
Sources 1
About this happening:
Anthropic is investigating a **Claude Code** bug that makes **usage limits** exhaust much faster than expected, leaving affected users blocked from normal use. The issue was still...
Anthropic Claude Code usage-limits bug causing faster exhaustion
Service DisruptionAbout this happening: Anthropic is investigating a **Claude Code** bug that makes **usage limits** exhaust much faster than expected, leaving affected users blocked from normal use. The issue was still...
Timeline
-
26.03.2026 18:40 2 articles · 2mo ago
AI-generated code is driving a rising CVE trend in March 2026
Initial DisclosureThe tracking effort began in **May 2025** and focused on tracing public vulnerability disclosures back to the commit that introduced the flaw. Early results showed that some CVEs could be attributed to AI-generated code by following commit history and metadata signatures.
Show sources
- Security Researchers Sound the Alarm on Vulnerabilities in AI-Generated Code — www.infosecurity-magazine.com — 26.03.2026 18:40
- Security Researchers Sound the Alarm on Vulnerabilities in AI-Generated Code — www.infosecurity-magazine.com — 26.03.2026 18:40