AI discovers 2,000 vulnerabilities in 7 weeks—why do most remain unfixed?

There used to be unspoken rules in the world of cybersecurity. When researchers discover vulnerabilities, they refrain from disclosing them until affected companies have patched them. There was a "window of time" for the vulnerability to be logged in the CVE channel and for the security community to respond.