Kaspersky, a global cybersecurity and digital privacy company, recorded 935 vulnerabilities within artificial intelligence and large language model (LLM) services during the second quarter of 2026, marking a tenfold increase compared to the end of 2025. According to the company's latest Quarterly Exploits and Vulnerabilities Report, the number of critical security flaws in these systems reached 119, representing a fivefold increase over the same period.
“Tools, plugins, and AI technologies help to effectively automate tasks, but the rapid adoption of AI across organisations is creating new security challenges. Weaknesses in access‑control, authentication, and injection handling are emerging as the most frequent vulnerability types. To stay protected, organisations need real‑time visibility into their infrastructure and access controls, not just traditional patch‑management, so they can detect and stop threats at the right moment,” comments Alexander Kolesnikov, Malware Expert at Kaspersky.
In the recent Kaspersky SMB report, it is mentioned that in the first 4 months of 2026, Kaspersky security solutions detected more than 33,300 attacks on small and medium-sized businesses in which malicious or unwanted software for PCs were disguised as popular AI-services. This number has surged by almost 5 times when compared to the same period in 2025, which draws attention to the fact that the more AI services are used, the more attempts there will be to attack them.
Kaspersky recommends organisations to protect corporate infrastructure by using solutions such as from the Kaspersky Next product line that delivers continuous monitoring, proactive protection, and rapid response capabilities that keep AI‑enhanced environments secure.
The full report is available on Securelist.com.
