Quantifies the surge in serious CVE disclosures after Claude Mythos Preview and Project Glasswing (about 2,500 in July 2026, 60% above June). Security and patching workloads for engineers are rising accordingly.
Key takeaways · AI-distilled
Epoch's July 2026 vulnerability count covers public reports from 21 selected organizations. It excludes undisclosed discoveries and is not a count of successful attacks or all vulnerabilities in software.
Epoch reports about 2,500 high- or critical-severity disclosures in July 2026. It notes that greater interest in finding bugs may contribute to the increase alongside improved discovery capabilities.
Epoch warns that vulnerability severity scores and disclosure records change after publication. Its historical monthly totals and comparisons with earlier records can therefore change as the source data is revised.
