AI Finds Software Vulnerabilities Faster Than Teams Can Patch Them
cnBeta, citing The New York Times, reports that AI is accelerating the discovery of software vulnerabilities beyond the capacity of many engineers and open-source maintainers to repair them. OpenAI says researchers have used its models to find more than 1,300 vulnerabilities since it began scanning open-source software in May, while Google reports using AI to find and fix 1,072 Chrome vulnerabilities in June. Some reports are valid and serious, but others are untested or poorly generated, adding to maintainers’ workloads; curl stopped paying bug bounties in January because of the influx. Security teams are also confronting the spread of offensive models, with Anthropic restricting its Mythos model and providing it through Project Glasswing to selected defenders.
The report documents a systemic mismatch in which AI-assisted vulnerability discovery is outpacing the human and organizational capacity to validate, coordinate, and ship fixes across widely deployed software.
据《纽约时报》报道,AI正在以前所未有的速度发现软件安全漏洞,负责修复问题的工程师却越来越难跟上。科技公司与开源软件维护者正加紧修补,争取赶在黑客利用这些漏洞之前,保护支撑大量网站和网络服务的软件。
10月21日,负责OpenAI网络安全准备与安全工作的福阿德·马廷(Fouad Matin),原本打算晚上与朋友庆祝生日。
但当天,他只睡了大约两个小时,一直忙着协调修复两处由AI发现的严重安全漏洞。这些漏洞一旦被利用,可能对大范围互联网服务造成冲击。参与处理的人员包括初创公司和科技巨头的安全研究员,以及美国和其他国家的政府官员。
他的待办清单上,还有更多AI发现的漏洞等着修复。

#OpenAI#Google#Microsoft#Anthropic#DeepSeek#Vals AI#Node.js#OpenJS Foundation#PHP Foundation#Chrome#curl#Project Glasswing