The vulnerability flood is here. Here’s what it means – and how to prepare

Collection of Sophos blog items (Apr 2026) highlighting an accelerating ‘vulnerability flood’ driven by AI/LLM-assisted discovery and exploitation, plus several active threats and industry updates. Key items: a call to accelerate vulnerability response and remediation as AI increases discovery and exploitation rates; an Adobe Reader zero‑day reported in active exploitation; a compromised Axios npm package used to deliver malware (supply‑chain/npm incident); an internal Red Team exercise using an agentic LLM tool (“OpenClaw”) that surfaced realistic attack paths; and product/industry news (Soph