The Vulnerability-Discovery Boom Risks Creating a Patching Crisis

Al-powered vulnerability-discovery tools may ultimately give defenders a significant advantage. For now, however, they are also exposing a more immediate problem: even the largest software vendors may be unable to remediate vulnerabilities as quickly as Al systems can uncover them. A recent investigation by Renee Dudley details how Anthropic’s Mythos has dramatically expanded the number of vulnerabilities Microsoft must address. In April, Mythos reportedly identified 90 critical and 141 important vulnerabilities in SharePoint alone. One of the challenges linked with LLM-enabled vulnerability discovery is triaging software patches. Software vendors have traditionally deferred lower-severity vulnerabilities to concentrate limited resources first on critical or important vulnerabilities. But Al systems can potentially help adversaries identify ways to chain several seemingly minor vulnerabilities into usable exploits. That may require vendors to rethink not only how quickly they patch,…