2026-08-26 · 2026-Q3
Gartner Emerging Risks Survey Ranks AI-Enabled Vulnerability Discovery First of 20 Risks
Outside the model: Context Agent tooling was not the attack surface, so no layer applies.
- Fixable:
- Unknown
- Vendor response:
- Unknown
- In the wild:
- No
Target
Industry-wide, from 316 senior executives, risk managers, and auditors surveyed in April and May 2026
Impact
In Gartner's quarterly emerging risks report, AI-enabled discovery of cyber vulnerabilities entered the list for the first time and went straight to first place by impact, ahead of geopolitical energy and supply shocks in second and agentic AI in third. 76% of respondents placed it in their top ten risks, rising to 78% in Europe and Asia-Pacific and in banking and financial services, against 75% in the Americas and 70% in the Middle East and Africa. Its time-frame score of 1.92 puts the expected impact between one and two years out, ranking it third on proximity. Respondents also rated themselves best prepared for this risk of all 20, a self-assessment the survey does not validate. Kevin Mercado, senior principal analyst in Gartner's risk and audit practice, framed the gap: "Without corresponding improvements in governance, security operations, and remediation capabilities, AI-driven vulnerability discovery may outpace organizational defenses"
Root Cause
Not an incident. Recorded here because it puts an executive-survey number on the trend the Rapid7, Searchlight Cyber, NTU, and Kimi K3 disclosures documented technically: the step from finding a flaw to holding working exploit code has compressed to close to nothing