This Week in Security: What’s in a name, the AI Bugpocalypse Hits Everyone, OpenWRT flaws, and Duress Passwords

Security researchers using AI tools are discovering vulnerabilities faster than ever—but the industry can't keep up. Hackaday reports that Oracle patched fourteen hundred ninety-nine security issues this month, Linux kernel maintainers just fixed three hundred twenty-three vulnerabilities in three days, and Microsoft is now recommending IT teams apply patches within just three days of release. The problem: patch cycles compressed so aggressively that there's barely time to test, meaning new updates introduce new instability, which erodes trust in rapid patching. Cisco has responded by ditching the industry standard of assigning a CVE identifier to every bug, moving instead to twice-monthly release cycles. The bottleneck is clear—AI is finding vulnerabilities at a scale the industry's testing and deployment infrastructure was never designed to handle.

Listen to this story

Hear this and more stories in a personalized audio briefing.

Open The Chonkerton