{"id":61768,"date":"2026-11-13T20:52:17","date_gmt":"2026-11-13T20:52:17","guid":{"rendered":"https:\/\/www.theregister.com\/a\/5309882"},"modified":"2026-11-13T20:52:17","modified_gmt":"2026-11-13T20:52:17","slug":"this-years-bug-count-just-passed-100k","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/this-years-bug-count-just-passed-100k\/","title":{"rendered":"This year\u2019s bug count just passed 100K"},"content":{"rendered":"<div><img decoding=\"async\" src=\"https:\/\/image.theregister.com\/262189.jpg?imageId=262189&amp;x=0&amp;y=0&amp;cropw=100&amp;croph=100&amp;panox=0&amp;panoy=0&amp;panow=100&amp;panoh=100&amp;width=1200&amp;height=683\" class=\"ff-og-image-inserted\"><\/div>\n<p><!-- placeholder(#1) --> <\/p>\n<p>Chalk up a new record for vulns. The number of Common Vulnerabilities and Exposures (CVEs) found and disclosed so far in 2026 surpassed 100,000 on Friday &#8211; more than double 2025\u2019s total &#8211; and the reason can be summed up in two letters: AI.<\/p>\n<p>\u201cIt\u2019s kind of wild,\u201d Josh Bressers, VulnCheck\u2019s director of coordinated vulnerability disclosure, told <span class=\"italic m-italic \" data-lab-italic=\"italic\">The Register<\/span>. \u201cThe thing that almost scares the bejesus out of me is while 100K sounds like a lot, in a couple years we&#8217;re going to say, remember when it was only 100K?\u201d<\/p>\n<p>As of the time of our interview, about 4 pm UTC on Friday, VulnCheck counted 100,222 CVEs, he said. Microsoft alone&nbsp;<a href=\"https:\/\/www.theregister.com\/security\/2026\/11\/10\/november-patch-tuesday-boasts-over-1000-bugs-one-already-under-attack\/5308946\">added 1,094 security flaws<\/a> to the total count on Tuesday, following 1,474 vulnerabilities the month before.<\/p>\n<p>\u201cThere&#8217;s no denying the fact that vulnerability hunting with AI is driving a majority of what we&#8217;re seeing.\u201d All the major CVE Numbering Authorities (CNAs) &#8211; these are the organizations authorized by the CVE program to assign unique identifiers to security vulnerabilities &#8211; like VulnCheck, Microsoft, Oracle, GitHub, and other large enterprise IT vendors \u201care just screaming into the atmosphere right now,\u201d Bressers said. \u201cIt\u2019s AI.\u201d<\/p>\n<p>Meanwhile, the percentage of these <a href=\"https:\/\/www.theregister.com\/security\/2026\/09\/21\/anthropic-linked-cves-pile-up-attackers-mostly-shrug\/5298018\">bugs that are exploited<\/a> in the wild remains relatively consistent. About 1.4 percent (1,363) of the CVEs published this year have been added to VulnCheck\u2019s Known Exploited Vulnerabilities (KEV) catalog.&nbsp;<\/p>\n<p>\u201cBut obviously, as the number of CVEs grows, [1 percent] of 1,000 is a lot different than [1 percent] of 100,000,\u201d Bressers said.<\/p>\n<p>Plus, as other security researchers have documented, the <a href=\"https:\/\/www.theregister.com\/research\/2026\/09\/09\/novel-blue-moon-kit-targeting-chrome-and-windows-reflects-new-reality-of-ai-driven-exploits\/5295399\">window between <\/a>the public release of a security patch and attackers developing working exploits \u2013 often by reverse engineering the patch while end users are still applying the fix \u2013 is rapidly shrinking. This is also <a href=\"https:\/\/www.theregister.com\/security\/2026\/10\/27\/ai-hacker-finds-4-severe-bugs-in-popular-industrial-control-software-in-under-4-hours\/5305811\">thanks to AI<\/a>.<\/p>\n<h3>From CVE to KEV<\/h3>\n<p>From January to June, 88 percent of the exploitation observed by CrowdStrike using public proof-of-concept (PoC) code <a href=\"https:\/\/www.theregister.com\/cyber-crime\/2026\/08\/03\/ai-is-both-the-weapon-and-the-target-in-latest-wave-of-cyberattacks\/5281534\">occurred within 48 hours<\/a> of the code&#8217;s release. The security firm said China-linked groups such as<a href=\"https:\/\/www.crowdstrike.com\/en-us\/adversaries\/vault-panda\/\"> Vault Panda<\/a> and<a href=\"https:\/\/www.crowdstrike.com\/en-us\/adversaries\/genesis-panda\/\"> Genesis Panda<\/a> moved even faster, launching attacks within 24 hours of disclosure.<\/p>\n<p>Similarly, VulnCheck found the median time from CVE publication to exploitation falling from 120 days in 2025 to <a href=\"https:\/\/www.vulncheck.com\/blog\/state-of-exploitation-1h-2026\" rel=\"nofollow\">80 days<\/a> during the first half of 2026. This window has closed even further during the second half of the year, which also seems to coincide with the <a href=\"https:\/\/www.theregister.com\/patches\/2026\/05\/14\/welcome-to-the-vulnpocalypse-as-vendors-use-ai-to-find-bugs-and-patches-multiply-like-rabbits\/5240027\">AI-induced vulnpocalypse<\/a>.<\/p>\n<p>\u201cIt\u2019s often just hours,\u201d Bressers said, noting 14 <a href=\"https:\/\/www.vulncheck.com\/blog\/copeland-xweb-evo-unauthenticated-root\" rel=\"nofollow\">make-me-root vulnerabilities<\/a> that VulnCheck disclosed on Friday in Copeland refrigeration controllers. Two are under active exploitation. These are the <a href=\"https:\/\/www.theregister.com\/security\/2026\/10\/15\/researchers-warned-attackers-could-defrost-the-food-months-before-french-supermarkets-got-hit\/5303425\">devices<\/a> that <a href=\"https:\/\/www.theregister.com\/security\/2026\/11\/09\/france-blames-iran-for-supermarket-hack-meltdowns\/5308591\">Iranian hackers<\/a> <a href=\"https:\/\/www.theregister.com\/security\/2026\/11\/05\/feds-warn-grocers-dont-chill-on-cyber-defenses-as-freezer-hacking-spree-heats-up\/5307978\">abused<\/a> to <a href=\"https:\/\/www.theregister.com\/security\/2026\/10\/17\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems\/5303677\">spoil food and spark fires<\/a> in <a href=\"https:\/\/www.theregister.com\/cyber-crime\/2026\/11\/02\/frozen-part-ii-hackers-remotely-defrost-produce-in-euro-supermarkets-again\/5306924\">supermarkets across Europe<\/a>.<\/p>\n<p>\u201cWe published those CVEs, and literally minutes later, we were seeing hits on our honey pots,\u201d Bressers said about the Copeland device vulnerabilities. \u201cWe\u2019ve hit a point where with anything that looks interesting, someone is taking that information and seeing what they can do with it. Is it AI driven? Probably. It&#8217;d be hard to say it&#8217;s not, because we&#8217;ve seen it really ramp up recently.\u201d&nbsp;<\/p>\n<p>This influx of software bugs requires a sea change in how the entire industry approaches vulnerability disclosure and patching.&nbsp;<\/p>\n<p>\u201cWe don&#8217;t have a security problem anymore,\u201d Bressers said. \u201cWe have a data problem now. Instead of obsessing over vulnerabilities, we need to start looking at things like heat maps for infrastructure, and figure out the vulnerabilities that actually affect you. The CISA BOD helps with that.\u201d<\/p>\n<h3>What to prioritize in a patchpocalypse<\/h3>\n<p>The US Cybersecurity and Infrastructure Security Agency (CISA) in June <a href=\"https:\/\/www.cisa.gov\/news-events\/directives\/bod-26-04-prioritizing-security-updates-based-risk\" rel=\"nofollow\">issued a cybersecurity directive<\/a> that replaces flat-deadline vulnerability management policies. Instead of prioritizing patching based solely on CVSS severity scores, the directive instructs organizations to prioritize based on specific risk criteria, including whether the asset is internet-exposed, under active exploitation, and whether an attacker can automate the exploit.<\/p>\n<p>\u201cIt&#8217;s telling people to figure out the vulnerabilities that actually affect you, and then put those at the top of the list, instead of just saying we&#8217;re going to fix all the criticals,\u201d Bressers said.<\/p>\n<p>AI-generated vulnerability disclosures also create <a href=\"https:\/\/www.theregister.com\/security\/2026\/06\/27\/its-looking-like-a-hot-messy-summer-for-security-teams-as-ai-finds-countless-previously-hidden-vulns\/5260478\">huge headaches for open source<\/a> software developers and maintainers, which Bressers describes as a security problem \u201c<a href=\"https:\/\/opensourcesecurity.io\/category\/podcast\/\" rel=\"nofollow\">super close to my heart<\/a>.\u201d<\/p>\n<p>\u201cYou&#8217;ve got individual developers that are drowning in vulnerability reports,\u201d he said. \u201cYou have foundations being crushed by AI agents scraping their data or downloading their packages, millions of times a day, and it&#8217;s straining the seams absolutely everywhere you look. The one thing I can say with certainty is: The way we currently do things has to change, and it&#8217;s going to have to change fairly soon.\u201d<\/p>\n<p>Different open source projects have taken different approaches to solving this issue. The Eclipse Foundation, which houses the <a href=\"https:\/\/open-vsx.org\/\" rel=\"nofollow\">Open VSX Registry<\/a>, in April launched a \u201cmanaged tier\u201d for enterprise customers and other organizations running Open VSX at scale.&nbsp;<\/p>\n<p>Instead of using the free, open source version, the managed version guarantees a 99.95 percent uptime SLA backed by service credits. Its customers include AWS, IBM, Google, Cursor, and Windsurf. This paid option means commercial users who rely on the registry help fund its ongoing maintenance &#8211; and their own platforms\u2019 security and performance.<\/p>\n<p>Meanwhile, curl\u2019s maintainer, Daniel Stenberg, citing an \u201c<a href=\"https:\/\/www.theregister.com\/security\/2026\/10\/20\/swamped-curl-maintainers-take-low-level-flaws-public-to-survive-vulnerability-avalanche\/5304198\">avalanche of vulnerability reports<\/a>,&#8221; updated its bug reporting rules last month. As of October 26, all low- and medium-severity reports go directly into the public GitHub repository, with only the high- and critical-flaws receiving private handling.<\/p>\n<p>Stenberg already<a href=\"https:\/\/www.theregister.com\/security\/2026\/01\/21\/curl-shutters-bug-bounty-program-to-stop-ai-slop\/5063039\"> shuttered curl&#8217;s bug bounty program<\/a> this year as AI-generated submissions piled work onto its security team.<\/p>\n<p>\u201cA lot more needs to happen, and I think it is going to be a challenge to enact some of this change,\u201d&nbsp; Bressers said. \u201cWhen a package registry drastically changes something, people start freaking out, and the world is going to end, and people on LinkedIn are complaining &#8211; a lot of people are hesitant. No one wants to be the first to jump into the alligator-filled pool. That&#8217;s one of our challenges.\u201d\u00ae<\/p>\n<p> <img decoding=\"async\" src=\"https:\/\/image.theregister.com\/?imageId=262189&#038;width=800\">READ MORE <a href=\"https:\/\/www.theregister.com\/security\/2026\/11\/13\/this-years-bug-count-just-passed-100k\/5309882\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p> \u2018We don\u2019t have a security problem anymore. We have a data problem now\u2019 READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":61769,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[307],"class_list":["post-61768","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-register","tag-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>This year\u2019s bug count just passed 100K 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/this-years-bug-count-just-passed-100k\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"This year\u2019s bug count just passed 100K 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/this-years-bug-count-just-passed-100k\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-13T20:52:17+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/image.theregister.com\/262189.jpg?imageId=262189&amp;x=0&amp;y=0&amp;cropw=100&amp;croph=100&amp;panox=0&amp;panoy=0&amp;panow=100&amp;panoh=100&amp;width=1200&amp;height=683\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/this-years-bug-count-just-passed-100k\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/this-years-bug-count-just-passed-100k\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"This year\u2019s bug count just passed 100K\",\"datePublished\":\"2026-11-13T20:52:17+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/this-years-bug-count-just-passed-100k\\\/\"},\"wordCount\":1006,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/this-years-bug-count-just-passed-100k\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/this-years-bug-count-just-passed-100k.jpg\",\"keywords\":[\"Security\"],\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/this-years-bug-count-just-passed-100k\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/this-years-bug-count-just-passed-100k\\\/\",\"name\":\"This year\u2019s bug count just passed 100K 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/this-years-bug-count-just-passed-100k\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/this-years-bug-count-just-passed-100k\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/this-years-bug-count-just-passed-100k.jpg\",\"datePublished\":\"2026-11-13T20:52:17+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/this-years-bug-count-just-passed-100k\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/this-years-bug-count-just-passed-100k\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/this-years-bug-count-just-passed-100k\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/this-years-bug-count-just-passed-100k.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/this-years-bug-count-just-passed-100k.jpg\",\"width\":100,\"height\":100},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/this-years-bug-count-just-passed-100k\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Security\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/tag\\\/security\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"This year\u2019s bug count just passed 100K\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"This year\u2019s bug count just passed 100K 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/this-years-bug-count-just-passed-100k\/","og_locale":"en_US","og_type":"article","og_title":"This year\u2019s bug count just passed 100K 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/this-years-bug-count-just-passed-100k\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2026-11-13T20:52:17+00:00","og_image":[{"url":"https:\/\/image.theregister.com\/262189.jpg?imageId=262189&amp;x=0&amp;y=0&amp;cropw=100&amp;croph=100&amp;panox=0&amp;panoy=0&amp;panow=100&amp;panoh=100&amp;width=1200&amp;height=683","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/this-years-bug-count-just-passed-100k\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/this-years-bug-count-just-passed-100k\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"This year\u2019s bug count just passed 100K","datePublished":"2026-11-13T20:52:17+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/this-years-bug-count-just-passed-100k\/"},"wordCount":1006,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/this-years-bug-count-just-passed-100k\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2026\/11\/this-years-bug-count-just-passed-100k.jpg","keywords":["Security"],"articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/this-years-bug-count-just-passed-100k\/","url":"https:\/\/www.threatshub.org\/blog\/this-years-bug-count-just-passed-100k\/","name":"This year\u2019s bug count just passed 100K 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/this-years-bug-count-just-passed-100k\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/this-years-bug-count-just-passed-100k\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2026\/11\/this-years-bug-count-just-passed-100k.jpg","datePublished":"2026-11-13T20:52:17+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/this-years-bug-count-just-passed-100k\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/this-years-bug-count-just-passed-100k\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/this-years-bug-count-just-passed-100k\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2026\/11\/this-years-bug-count-just-passed-100k.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2026\/11\/this-years-bug-count-just-passed-100k.jpg","width":100,"height":100},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/this-years-bug-count-just-passed-100k\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Security","item":"https:\/\/www.threatshub.org\/blog\/tag\/security\/"},{"@type":"ListItem","position":3,"name":"This year\u2019s bug count just passed 100K"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/61768","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=61768"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/61768\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/61769"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=61768"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=61768"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=61768"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}