Off By Play today's five

The world's software averaged 69 publicly reported security bugs a day in 2022. In the first half of 2026, how many a day?

195

Software security bug disclosures hit 35,364 in the first six months of 2026, about 195 a day, up from 69 a day in 2022. AI models now hunt vulnerabilities at machine speed; Anthropic's Claude Mythos spent the spring stress-testing codebases and unearthing thousands of hidden vulnerabilities on its own. August alone produced 12,291 bugs, about 396 a day.

Software security bugs reported per day: 69 in 2022, 195 in early 2026. AI models now hunt bugs at machine speed.

Source: CVE Program records via Jerry Gamblin (mid-year 2026 review; monthlyCVEStats GitHub repo, data through Aug 2026); FIRST 2026 forecast update · checked Sep 2026

This was one of five on September 21, 2026.

Play today's five

More numbers people get wrong