The AI Bug Apocalypse Has Officially Started

This week, several unpatched Linux kernel vulnerabilities, two of them rated CVSS 9.0, were accidentally posted to the public kernel mailing list. We break down what leaked, why the kernel’s security team is drowning in AI-generated bug reports, and how it all fits into what security experts are calling Black October. We also look at what this AI-driven wave of vulnerabilities means for the future of security, and what you should patch right now. ❤️ More about us Radically better observability stack: https://betterstack.com/ Written tutorials: https://betterstack.com/community/ Example projects: https://github.com/BetterStackHQ 📱 Socials Twitter: https://twitter.com/betterstackhq Instagram: https://www.instagram.com/betterstackhq/ TikTok: https://www.tiktok.com/@betterstack LinkedIn: https://www.linkedin.com/company/betterstack 📌 Chapters: 00:00 Linux bugs sent to the wrong mailing list 00:53 What Zero Day Initiative leaked 01:28 Why SMB bugs are so dangerous 02:14 The two critical bugs (and the rest of the list) 03:09 Kernel maintainers saw this coming 03:37 AI-found bugs are now public by default 04:09 The rest of Black October 04:40 A disclosure wave, not an attack wave 05:11 The vulnerability patch wave 05:40 The numbers: Mythos, Patch Tuesday, Chrome 06:23 The new bottleneck: fixing, not finding 07:03 AI agents in bank accounts 07:25 The hopeful part 07:46 What you should do 08:24 Will AI bug hunting make software safer?