Some good news today, at last.

Although one might want to insert the WWII airplane hit distribution picture here, especially with regard to exploits used by governments, as those are not part of the disclosed sets and targeted attacks are also in general much less likely to show up using simple attack monitoring.

Instead, the data suggests that AI is currently better at increasing the volume of vulnerabilities researchers can uncover than at increasing the proportion that attackers actually exploit.

Makes sense, if AI can find an exploit, then everyone is going to know about it pretty soon.