None were used in real attacks, and all were reported to vendors and patched, but outside readers cannot check how much of the work the model did alone.
Thin staffing and little funding leave widely used code exposed to failures and security incidents across the software stack companies depend on.
The kernel project is moving to treat AI help like any other development tool as disclosure rules drop.
The approach is still research, but it could change how Linux systems handle compressed memory under load.
The freeze limits new filings in one program while Google says pre-existing and supply-chain reports can still be handled.
A long-used placeholder host in web docs now points to attacker-controlled infrastructure serving a malicious Windows ClickFix flow.