upvote
This has been going on for months actually with no end in sight.
reply
Maybe I'm not enough in the weeds to see it as much, but the last few months seem to have been a much slower trickle of "how did we not catch this" exploits, while they are now appearing with much more sophisticated (though still usable in practice) exploit chains on much larger target codebases.

The last few months seem to have been a lot more imunder control with also the frontier labs more warning of "what happens when Mythos-class model get in the hands of everyone" than that actually becoming reality. Now, it appears to be actuually turning into reality.

reply
It depends on the net rate of new bugs being made vs the bugs discovered and fixed. Hopefully AI can find bugs faster than new ones are being created.
reply
I think this marks the beginning of the golden age. Investments in automated agent driven security scans on all software is coming to every business. Software and infrastructure will become more secure than ever before.
reply
I also hope that we come out in a golden age, but we are very much in for a rough few months/years where all the low hanging fruit is being picked up until we end up with much more hardened systems.
reply
[dead]
reply
> the single worst security news day ever

I'd say, the single worst security news day for now

reply
Did you go to sleep in 2015 and then wake up just now in 2026?
reply
Buckle up
reply
What? More like a golden age of security. AI is ripping the bandaid off right now. At the end of this software is going to be a lot more secure.
reply
That's where we will end up, but the in between time is the worst time ever for trying to secure an internet connected computer.
reply
> At the end of this software is going to be a lot more secure.

Can I get that in writing?

As we speak more slop is added to the pile, far more than can reasonably be reviewed and a lot of that code will be insecure.

reply