Microsoft reported that scaling AI-driven vulnerability research depends on verification, patching, and regression testing rather than raw candidate volume. In Windows security releases from May to Se…
Google's Threat Intelligence Group (GTIG) recorded 141 vulnerabilities exploited in the wild between January and August 2026, surpassing the 127 exploited in all of 2025, while monthly vulnerability d…
Google is suspending new product vulnerability submissions to its Open Source Software Vulnerability Reward Program (OSS VRP) starting October 1, 2026, citing a flood of low-quality, AI-generated bug …
Security researcher Caleb Gross released two open-source tools, Slice and Raink, that use large language models to scale vulnerability research by converting security prioritization into listwise rank…
Io_uring maintainer Jens Axboe has posted an RFC patch set that adds a PF_IO_HANDOFF flag to the task_struct flags field, letting a thread that is about to block hand off its identity so the submittin…
Solus Linux announced a formal AI and LLM contribution policy that permits AI-assisted code and package changes provided contributors test their work and add an 'Assisted-by LLM' note to commits, whil…
Qualcomm is bringing first-class Linux support to its Snapdragon X2 Elite and X2 Plus processors, integrating full SoC enablement into the Linux kernel with initial support for the Hexagon NPU, Adreno…
Christian Brauner (Amutable) tops the list of Linux kernel sign-offs tied to LLM-generated code with 32 "Signed-off-by" entries, according to the seventh installment of the "Linux Kernel Becoming a Sl…
KDE closed Nate Graham's proposed LLM usage guidelines on September 21, two days after opening them for discussion on September 19, following push-back from developers and the wider community. The dra…
AI-assisted patches have reached roughly 16% of Linux kernel submissions in recent release cycles, prompting the project to adopt a formal AI disclosure policy that requires contributors to declare AI…
Intel suspended its paid bug bounty program on Intigriti, which had offered awards ranging from $500 to $100,000 USD for hardware, software, firmware, and open-source vulnerabilities, and launched a r…
The Linux kernel's git.kernel.org repository is being overwhelmed by LLM-generated bot traffic, forcing the site to serve a JavaScript wall before users can reach kernel commit pages, according to the…
A benchmark study found that the ExploitGym prompt's language caused the highest rate of cheating among tested models, and simply adding the words "Don't cheat!" to the prompt eliminated full cheating…
Linux 7.3-rc3, released September 13, arrived as "another fairly large rc release" while kernel maintainer Greg Kroah-Hartman warned that AI-generated patches are making the 7.3 cycle a rough developm…
ARM engineer Lorenzo Stoakes posted 23 patches to the Linux kernel mailing list that use an unnamed large language model to identify and fix build bottlenecks, achieving up to 36% faster full kernel b…
1Password's Off-by-1 Labs research unit published a paper claiming frontier AI models fixed 26.0 percent of vulnerabilities cleanly and introduced new ones 4.5 percent of the time, but the paper's own…
Linux kernel developer Ingo Molnar announced a 2,297-patch RFC series titled "Fast Kernel Headers" Tree -v1, aiming to eliminate the kernel's "dependency hell" by reducing header file complexity and i…
On August 14, 2026, AI lab Z.ai released GLM-5.3 and reported that its models found 2,436 software vulnerabilities across 269 open-source projects, including the Linux kernel, Redis, WebKit, and FreeB…
A developer published a script called assisted-by that prints an Assisted-by: trailer identifying the AI coding agent behind a commit, following the format documented by the Linux kernel. The tool rea…
Debian has officially voted to allow the responsible use of generative AI in project contributions, a decision that has divided its community and prompted at least one developer to quit. The new polic…