But open-source maintainers are so swamped by AI-generated reports that some no longer accept them, and 93.6% of exposed PHP hosts were still unpatched five days after fixes shipped. Finding bugs is no longer the hard part. Getting them triaged and patched is.
From the Field Notes:
- Autonomous AI agent Cipher finds four EPICS Base vulnerabilities, including a CVSS 9.8 integer overflow (2026-10-28)
- How Check Point accelerates vulnerability research with Daybreak (2026-10-28)
- Cognition launched Devin Security 2.0 , combining frontier-model scans with autonomous patching in parallel VMs. (2026-10-26)
- Oracle launches AI Security Mesh, a managed vulnerability-finding service built on OpenAI's frontier cyber models (2026-10-28)
- MAI Cyber 1.1 Flash: Sharper findings and fewer tokens inside MDASH (2026-10-28)
- OpenAI's Daybreak lead says AI-generated bug reports are overwhelming open-source maintainers; Patch the Planet has 458 of 661 patches accepted (2026-10-28)
- OX Security: 93.6% of measurable PHP hosts still unpatched five days later (2026-10-27)