It's also important to know that some of these CVEs require super niche or unusual configuration to be exploited. This doesn't make them less valid, than elf that llms are good at is chaining exploits.

What it does do is make the defender's job significantly more difficult because how do you both stay up on all the latest vulnerabilities, but then also find valid patches without resorting to using vibe coding?

It's also worth pointing out that the fact there is a new breed of exploit discovery tools itself is creating a new focus on finding and fixing security exploits.

Many (perhaps the majority?) of these were not discovered by AI agents, but were found due to extra thorough testing due to the fear of security issues being found by AI agents.