CVEs jumped from ~4k to ~15k a month since April, and the security treadmill is breaking
saranormous · x · 2026-10-22
saranormous warns that monthly CVE disclosures exploded from 4k to 15k since April, forcing a rewrite of 50 years of software security sloppiness before adversaries (or frontier models pointed at the backlog) exploit it. Key data from her thread: Oracle's quarterly patch drop hit 1,283 fixes vs 374 a year ago, yet regression testing still runs manually; HackerOne customers halved fix times over 2 years but backlogs still grew 131%. The fix: agents should reproduce, patch, test and ship at machine speed, with engineers handling only judgment calls — and a major resource reallocation to cyber defense this year.
More from AGI Musings
- Insider View: Why Chinese Hospitals Are Adopting AI Far Faster Than the West — 96Stats · 2026-10-22
- Researchers urge focus on cyber risk, not nanobot doomsday, as AI's real danger — nlarusstone · 2026-10-22
- tszzl: AI cyber offense stays dominant as every new model opens fresh attack surfaces — tszzl · 2026-10-22
- AI philosopher laments being mistaken for an AI ethicist — moonsandhues · 2026-10-22
- Blogger argues we're 1/3 of the way to recursive self-improvement — imjustnewatai · 2026-10-22
- Humans Are Born With an Innate World Model Shaped by Evolutionary Priors — yunta_tsai · 2026-10-22