AI gets good at finding bugs, not as good at fixing them
…It's everything that happens after. "Turning vulnerability candidates into validated, reproducible findings that maintainers and customers can actually act on takes time: confirming affected versions, assessing real-world impact, coordinating with…