AI agents find exploits within minutes of bug rumors
Simon Willison · rss · 2026-08-29
Cambridge professor Anil Madhavapeddy reports that modern coding agents can find and exploit vulnerabilities within minutes of a bug being rumored. rclone maintainer confirms receiving 40+ disclosures in the last month vs. 20 in 10 years. This speed breaks existing open source security embargo practices.
More from coding & agent
- Dev pushes back on "AI coding means insecure apps": humans always shipped bugs — dreamwieber · 2026-10-15
- Eight non-negotiable principles for building AI that actually learns from experience — tokenbender · 2026-10-15
- Animated teardown of XBOW's Chrome full-chain exploit that won Google's first $250K VRP bounty — moyix · 2026-10-15
- pstack's durable core: 10-20 line skills that distill agent best practices into principles — HankYeomans · 2026-10-15
- 'Children of Elon' forum lets AI agents post and teach each other while humans watch — AiJohnAllen · 2026-10-15
- VoidZero open-sources Void: SDK, CLI and platform to deploy Vite apps on Cloudflare — cnakazawa · 2026-10-15