More than 1 million LinkedIn users have clicked the platform's new 'Seems like AI slop' button since its launch at the end of July, and LinkedIn Chief Product Officer Hari Srinivasan said those who co…
OpenAI President Greg Brockman warned in a Sunday blog post that organizations must rapidly upgrade cybersecurity practices as frontier AI models gain the ability to discover software flaws and build …
OpenSSH 10.5, released August 11 just five weeks after 10.4, breaks the project's traditional release cadence in response to a flood of security reports from AI models, with maintainers announcing mor…
OpenSSH 10.5, released on August 11, just five weeks after 10.4, includes three security fixes and a change in release cadence due to a flood of security reports from AI models or made with AI assista…
The curl project shut down its bug bounty in January 2026 after AI-generated reports overwhelmed triage, with the share of valid reports falling from above 15% to below 5% in 2025, and in the first th…
Five teams maintaining the Rust compiler and standard library — compiler, libs, types, rustdoc, and bootstrap — adopted a formal LLM policy for the rust-lang/rust repository that permits using LLMs fo…
JFrog's security research team found that 54 of 55 SQLite advisories filed as critical CVEs were fabricated by an AI language model, including CVE-2026-51302, which was withdrawn four days after publi…
Anthropic disclosed that one of its AI agents, during a cybersecurity capture-the-flag exercise, followed instructions to install a malicious PyPI package, leading to the compromise of a third-party c…
Open-source projects are formalizing rejection of AI-generated contributions at an accelerating pace, with five independent actions in seven days. Codeberg banned AI-generated code in a 358-144 member…
GitHub cut its public bug bounty payouts by at least 50% across all severity levels effective July 27, 2026, and moved top rewards to an invite-only VIP tier, citing a flood of AI-generated spam repor…
The White House launched the Gold Eagle initiative on July 14, 2026, as a central clearinghouse to triage and coordinate patches for AI-discovered vulnerabilities across federal systems, critical infr…
OpenAI launched Patch the Planet, a program using AI with human review to find and fix open-source security vulnerabilities, after AI-generated reports overwhelmed bug bounty programs. In a five-day s…
Godot Engine formally banned AI-generated code from its open-source project on June 30, citing maintainer burnout and the inability of AI-reliant contributors to fix their own code. The policy prohibi…
Curl maintainer Daniel Stenberg, who has triaged over 1,000 vulnerability reports, published a field guide on how to report vulnerabilities effectively. The guide emphasizes making reports easy for ma…
OpenAI's GPT-5.5-Cyber, launched under the "Patch the Planet" initiative with Trail of Bits, has filed 64 pull requests and 51 issues across 19 open-source projects including cURL, Python, and Go in i…
An open-source maintainer rejected a three-line Go patch fixing a ProtonMail authentication bug in the hydroxide bridge, citing it as 'AI slop.' The author, who used a language model for codebase expl…
AI security firm AISLE discovered six new CVEs in curl, including the oldest latent bug in the project's history, and previously found all 12 zero-day vulnerabilities in OpenSSL's latest security rele…
Anthropic's Mythos AI security tool, touted as too dangerous to release, found only one low-severity vulnerability in the heavily audited curl codebase after a privileged deployment. The curl project …
Linux kernel maintainer Greg Kroah-Hartman says AI-generated security reports and patches have dramatically improved over the past month, shifting from low-quality 'AI slop' to real, useful bug report…
A developer explores when it is acceptable to forward AI-generated output to another human reader, while another engineer outlines three methods for AI coding at home without enterprise-level spending…