It's also worth pointing out that the fact there is a new breed of exploit discovery tools itself is creating a new focus on finding and fixing security exploits.
Many (perhaps the majority?) of these were not discovered by AI agents, but were found due to extra thorough testing due to the fear of security issues being found by AI agents.