Commercial AI Models Show Rapid Gains in Vulnerability Research

A collection of Infosecurity Magazine headlines (Apr 2026) highlighting rapid AI gains in vulnerability research and defensive tooling alongside growing abuse risks; multiple high-impact vulnerabilities and active exploitation (notably nginx-ui MCP authentication bypass CVE-2026-33032, CVSS 9.8), large-scale malware and ransomware activity (adware disabling AV across ~23k hosts, Rhysida ransomware affecting 337k+ patients, automotive ransomware surge), widespread Android malware evasion techniques, law‑enforcement takedowns of DDoS‑for‑hire and phishing operations, and shifts in vulnerability‑