The Linux kernel team has a policy that all bugs are potential security threats and should be assigned a CVE. That does not mean these CVEs are exploitable. Many will be for features that aren’t even enabled on typical systems.
LLMs are allowing researchers to locate known classes of bugs more easily than an exhaustive search with other tools. Security researchers are driving the bus here. Not the tech companies or their products. Don’t believe the marketing hype. The tech companies want us to be dependent on subscriptions to their products and deskilling is part of their agenda. Good stuff is coming from security researchers using their expertise and tooling.
The Linux kernel team has a policy that all bugs are potential security threats and should be assigned a CVE. That does not mean these CVEs are exploitable. Many will be for features that aren’t even enabled on typical systems.
LLMs are allowing researchers to locate known classes of bugs more easily than an exhaustive search with other tools. Security researchers are driving the bus here. Not the tech companies or their products. Don’t believe the marketing hype. The tech companies want us to be dependent on subscriptions to their products and deskilling is part of their agenda. Good stuff is coming from security researchers using their expertise and tooling.