Yeah a 1000% YoY increase in CVEs is absolutely a change in detection methodology. Like when cancer rates spike after a cheap test comes on the market.

The slop programming doesn’t help, and frantically patching those CVEs with slop code is probably the cause of some of the instability, but the CVEs themselves have likely been there for years, just until now the only folks that knew about them have top secret clearances.