Call me a cynic, but I don't it's a coincidence that an AI company publishes a press release about 5 high-profile bugs they found in Chrome, Safari, Android, Windows and Linux the day after they file their IPO. As usual, they don't say anything about how many millions of tokens were spent, or about how many hours experts had to pour over results to weed out these 5 as the nicest examples among all the false positives. That is what future investors *should* want to know...
For the monthly Windows update we also do not have data about the cost of finding vulnerabilities, but at least here we can see a trend in the overall numbers: the October update set a new record with fixing 1411 CVEs, comfortably beating the records sets in the previous months (723 in Sept, 537 in July, and 180 in June). In fact, this month's update fixed more CVEs than the total for the entire year 2025.