Start free trial

TRUE, BUTMoved Ruler

Its 2024 report: low to medium risk

The vendor reporting that 99.9% of AI vulnerabilities go unpatched rated the same class of packages 'low to medium risk' in its own 2024 report.

“99.9% of AI vulnerability alerts with an available fix remain unpatched, and 81% of organizations running AI packages have a known vulnerability with an average CVSS of 8.79”

Orca Security's 2026 State of AI Security Report, amplified by August 2026 security-statistics roundups

Recorded 14 August 2026. Our ruling means: literally true, materially misleading.

Read the story →

Receipts pack

The evidence file for this verdict

4 receipts: 1 support the claim, 1 contradict it, 2 add context. 3 figures on the record, 2 traced to a quoted receipt.

The receipts

Each source, the line we quote from it, its date and which way it cuts. Free to read and to cite.

  1. 1Supports the claimorca.security ↗

    99.9% of fixable AI vulnerabilities remain unpatched.

    Look up an archived copy ↗

  2. 2Contradicts the claimcyentia.com ↗

    The typical organization only fixes about 10% of its vulnerabilities in any given month.

    Look up an archived copy ↗

  3. 3Contexthelpnetsecurity.com ↗

    81.2% of companies running AI packages have at least one known vulnerability

    Look up an archived copy ↗

  4. 4Contextorca.security ↗

    most of these vulnerabilities are low to medium risk with an average CVSS score of 6.9, and only 0.2% of the vulnerabilities have a public exploit (compared to the 2.5% average)

    Look up an archived copy ↗

Members' extras

What each receipt proves, and what would change our mind.

  • What each receipt above proves, in our words
  • The figures table, each number traced to the receipt that states it
  • The trick behind the claim, explained, with the guide to spotting it
  • What would change our verdict
  • Our call on the record, with its due date

The verdict, the opening and every receipt above stay free. Membership adds our analysis to the evidence file for every checked story.

See Membership →Already a member? Sign in →

First membership: 30 days free, then A$89 a year. One introductory trial per customer. Card required; renews annually until cancelled. Cancel before the trial ends to avoid the first charge.