Technology
AI finds more software flaws, VulnCheck study says
The Indian Express·
Seven cybersecurity professionals told Reuters that AI-found software vulnerabilities are almost certain to trigger more outages like this week’s government website disruptions. VulnCheck research due soon says AI helped double digital flaws found year on year. Cloudflare CEO Matthew Prince said more severe weaknesses remain in critical software. The week’s outages followed PHP weakness discoveries.
Prism
What It Means For You
- Some operators took sites offline when they could not patch PHP before expected exploitation.
- Prince said defenders may face busy months as AI surfaces long-hidden internet weaknesses.
- VulnCheck’s Patrick Garrity said more fire drills are likely for internet-exposed systems.
What's Happening
- The same week brought disclosures tied to Node.js, Plex, LiteLLM, Railway, and eMudhra’s weak cryptographic key.
- RunSafe’s Shane Fry said AI is shortening the time from bug find to weaponisation.
- Hunt.io said tracked cybercriminals had not assembled a working PHP exploit tool by 1800 GMT Thursday.
Why timelines are shrinking
- Experts said building exploits once took weeks or months and now can take hours with models.
- curl lead Daniel Stenberg said many AI-found bugs are exotic and hard for rogue actors to use.
- Prince compared the cleanup to clearing monsters from a haunted house once they are visible.
all-news
