Skip to content

#Security/incidents

0 items today
2/17Tue
  1. Martin Alderson76

    When AI finds a zero-day in software nobody maintains, who fixes it?

    Anthropic's red-team research shows that Claude Opus 4.6 can find 500 high-severity vulnerabilities in mature open-source projects like GhostScript and OpenSC—some of which have been sitting there for decades.

    Why it matters: Using an RCE case he reproduced himself, the author shows that once AI drives the cost of finding vulnerabilities down, unmaintained software becomes the real risk surface.