If the vulnpocalypse is the apocalypse, where are the agentic attacker hordes?

The piece argues that despite a wave of AI-linked vulnerability disclosures, including PHP2Shell, cyber damages have tapered rather than spiked since ChatGPT's 2022 launch. The author attributes this to real-world bottlenecks on criminals and governments, such as talent, law enforcement, unstable AI inference access, and deterrence, rather than to attacker…