Project Glasswing and open source: The good, bad, and ugly
…to fix those bugs. Who's going to bell that cat? So I asked people who are a lot smarter than I am about software security and open source software, and this…
Search
AI gets good at finding bugs, not as good at fixing them
…Validation and patching aren’t What good is finding a hole if you can't fix it? Anthropic last week talked up Claude Code's improved ability to find software vulnerabilities and…
Apple is working on passcode bug locking out iPhone users
Personal Tech Locked-out iPhone user tells The Reg that Apple is scrambling to fix character flaw passcode bug University student says he plans to move to Android, but concedes iOS engineers…
Firefox finds a slew of new bugs with Claude's help
…All of these bugs are now fixed in the latest version of the browser." Anthropic says it managed this feat using its recent Claude Opus 4.6 model and even got its…
Cryptographer fights RustSec ban over bug reports
…Kobeissi also took aim at Cryspen, a cryptographic software firm based in Paris, in a February 5 blog post , complaining that the company fixed the bug without "any public disclosure, security advisory…
Microsoft releases emergency fix for account internet error
…right after this out-of-band patch Microsoft has released an out-of-band update to resolve bugs introduced by a Windows patch just days after promising improved reliability. The fix , shipped…
Ransomware scum, other crims exploit 4 old Microsoft bugs
…After initially disclosing this bug in November 2025, Redmond fully fixed it a month later. CVE-2023-36424 , a Windows Common Log File System Driver flaw that allows privilege escalation. Microsoft patched…
Customers revolt as GitHub Copilot 'fixes' rate limits
AI + ML Customers revolt as GitHub Copilot 'fixes' rate limits Repair of bug that undercounted token usage leads to rapid exhaustion of subscription allowance Microsoft's GitHub last week told Copilot customers…
AI vendors' response to security flaws: It wasn't me
…patch, the bug hunters claim, could have reduced risk across software packages totaling more than 150 million downloads and protected millions of downstream users. Anthropic's reasoning for not fixing the flaw…
Avalonia bolts Linux and WebAssembly onto .NET MAUI
…MORE CONTEXT Fixing Claude with Claude: Anthropic reports on AI site reliability engineering AI for software developers is in a 'dangerous state' Oracle unveils Project Detroit for faster Java interop with JavaScript…