Mandiant agents find 100+ flaws in two days

Google Mandiant says its Agentic Vulnerability Discovery Harness (AVDH) found more than 100 verified, high-severity software vulnerabilities in two days while investigating stolen corporate repositories. The report says the internal system has scanned tens of millions of lines over ten months and produced tens of thousands of findings; Google’s defensive guidance warns that AI is compressing the time between discovery and exploitation. Security teams should treat the figure as a reason to accelerate continuous code review and patch ownership—not as permission to trust unverified agent findings—alongside Google’s earlier account of an AI-built zero-day.