AI Raises the Bar on Vulnerability Awareness and Secure-by-Design Software

A batch of May 2026 security stories highlights accelerating AI-driven vulnerability discovery and exploitation, stronger regulatory and industry pushes toward secure-by-design software, and a wave of high-impact vulnerabilities and malware. Notable items include a severe zero‑day in on‑premises Microsoft Exchange, new Linux kernel elevation-of-privilege flaws (Fragnesia / ‘Dirty Frag’), 47 zero‑days disclosed at Pwn2Own Berlin, and large-scale supply‑chain and data incidents (Grafana source-code theft, Avada Builder flaws affecting ~1M WordPress sites, npm/PyPI compromises). Multiple modular/