The growing adoption of artificial intelligence (AI) is happening across multiple sectors and has also led to an increase in the number of vulnerabilities discovered within AI services, according to Kaspersky’s Quarterly Exploits and Vulnerabilities Report.
It’s a notable trend, says Kaspersky, with the number of recorded vulnerabilities in AI and LLM services in Q2 increasing by 10 times since Q4 2025 – reaching 935. The number of critical vulnerabilities sits at 119 in Q2 2026, which is almost 5 times the number recorded at the end of 2025.
The analysis of the most common vulnerability categories indicates that the primary issues in AI‑related software are weak access‑control mechanisms for critical system objects, improper implementation of authentication and authorisation, and injection vulnerabilities.
“Tools, plugins, and AI technologies help to effectively automate tasks, but the rapid adoption of AI across organisations is creating new security challenges,” says Alexander Kolesnikov, malware expert at Kaspersky. “Weaknesses in access‑control, authentication, and injection handling are emerging as the most frequent vulnerability types. To stay protected, organisations need real‑time visibility into their infrastructure and access controls, not just traditional patch‑management, so they can detect and stop threats at the right moment.”
The recent Kaspersky SMB report says that in the first 4 months of 2026, Kaspersky security solutions detected more than 33 300 attacks on small and medium-sized businesses in which malicious or unwanted software for PCs were disguised as popular AI-services. This number has surged by almost 5 times when compared to the same period in 2025, which draws attention to the fact that the more AI services are used, the more attempts there will be to attack them.