The cybersecurity landscape is currently facing a massive influx of fake AI PoCs polluting public code sharing platforms. Security researchers rely on public exploit repositories to study vulnerabilities and build accurate detection tools. However, recent data reveals that the signal-to-noise ratio is rapidly deteriorating. The Initial Access Intelligence team at VulnCheck recently shared their insights on this growing problem. As detailed in their report, researchers have already reviewed over 17,800 proof-of-concept scripts by mid-August 2026.

GitHub increasingly resembles a warehouse stocked with ready-made exploits, yet nearly half of all new publications fail to hold up under scrutiny. Researchers at VulnCheck have identified a sharp surge in fabricated and AI-generated code being passed off as functional exploits for known vulnerabilities. By mid-August 2026, the company had reviewed more than 17,800 such publications - a figure already representing 87% of its total output for all of 2025.

Hackers are targeting cybersecurity researchers with infostealers

Tricky attackers trying yet again to deceive the good guys on home territory