AI writes new ones too. One analysis found AI introducing nine times as many vulnerabilities as human developers, and a study of 470 pull requests found AI-co-authored code had about 1.7 times more issues. Discovery and creation are both happening.