Hyperscalers show AI-driven bug explosion doesn't have to mean mass exploitation
AccBalanced · x · 2026-11-13
Joshua Saxe argues the AI "vulnpocalypse" is more nuanced than exploding CVE charts suggest: the surge mostly reflects defenders finding far more bugs with AI. The outcome is uneven — hyperscalers (Amazon, Meta, Google, Apple) spend hundreds of millions yearly on appsec (secure code refactoring, fast fixes, auto-updates) and have prevented mass exploitation despite the bug explosion, while mid-market vendors (Ivanti, Citrix, GitLab) with 10-100x smaller budgets and customer-patched products are getting mass exploited. He stresses that finding bugs (e.g. OpenAI's 1,000 Linux kernel bugs) matters less than fixing and shipping patches quickly.
More from AGI Musings
- MIT Press quote sparks agreement: embodiment as direct openness to the world is what AI lacks — AnnaCiaunica · 2026-11-13
- The Singularity Clock Predicts AGI by December 2026, ASI by 2033 — Delam2 · 2026-11-13
- Lean proofs test Michael Levin's bioelectricity theory: math holds at 88%, 'Platonic' extra scores 0% — ProfBuehlerMIT · 2026-11-13
- Design and UX jobs down as AI debate heats up — round · 2026-11-13
- Almost no one notices Fable 5.2's gains—evidence against near-term foom — adam_karvonen · 2026-11-13
- Carl Edwards' AssayBench talk: predicting biology and what to measure next — kchonyc · 2026-11-13