Tech companies and open-source teams are facing a deluge of AI-discovered software vulnerabilities. Now we're starting to get a sense of how big a deluge it is. The Zero Day Initiative, the largest ...

The developer of the popular curl command-line utility and library announced that the project will end its HackerOne security bug bounty program at the end of this month, after being overwhelmed by ...

An "avalanche of vulnerability reports" is forcing curl to move lower-severity cases into public view, reserving private ...

A yearlong AI audit of curl uncovered a 25-year-old authentication bypass, warning enterprise AppSec teams to re-evaluate ...

Aisle found six Curl flaws after Mythos and Codex reported none.

AI slop and internal automation are forcing Intel, Google and others to rethink paid bug bounties. Here is how vulnerability ...

Lately, the Curl code library has been receiving a lot of AI-generated reports from users hoping to receive financial compensation from the tool’s bug bounty program. Going through all the reports has ...

HTTP/2 upload use-after-free that a malicious server can trigger; code execution was demonstrated under strict conditions.

OpenAI launched Patch the Planet on June 22, pairing GPT-5.5-Cyber with full-time security engineers from Trail of Bits to find, validate, and patch vulnerabilities in widely used open-source projects ...

Over the past years, the author of the cURL project, [Daniel Stenberg], has repeatedly complained about the increasingly poor quality of bug reports filed due to LLM chatbot-induced confabulations, ...

You may not have heard of Aisle, an AI-native vulnerability-management startup, but some of the best open-source maintainers know it well and really like it. Why? Because Aisle finds real bugs that ...