AI is Breaking Two Vulnerability Cultures

This blog post discusses the evolving cultures of vulnerability disclosure in software security, contrasting the coordinated disclosure method with the 'bugs are bugs' approach. The author highlights the implications of AI on these practices, suggesting that the increasing speed of AI-assisted vulnerability detection necessitates shorter embargo periods. Jeff Kaufman emphasizes the need for a shift in how vulnerabilities are disclosed and fixed in light of rapid technological advancements.