Solutions to the vulnpocalypse are here. They’re just not evenly distributed

The author argues that while AI-driven bug discovery has dramatically increased the volume of vulnerabilities in 2026, the software industry's security outcomes are sharply jagged. Well-resourced hyperscalers like Amazon, Meta, Google, and Apple successfully prevent mass exploitation through rapid patching and automated updates, whereas under-resourced mid-market vendors and open-source projects struggle significantly. Solving this vulnerability crisis requires lowering the cost of elite security operations and potentially introducing stronger policy guardrails. Open article →