AI Is Breaking Two Vulnerability Cultures — Security Researcher Argues AI Disrupts Both Disclosure Norms and Software Patching Expectations

Hacker News·high signalXBlueskyLinkedInCopy link

Jeff Kaufman's essay, trending on Hacker News with 332 points and 133 comments, argues that AI is simultaneously disrupting two distinct vulnerability cultures: the security research community's coordinated disclosure norms and the software community's patching expectations. The piece examines how AI-generated code and AI-assisted vulnerability discovery collapse the assumptions both cultures rely on — responsible disclosure timelines become meaningless when AI can independently rediscover the same vulnerability, and patching cadences break when AI generates novel vulnerable code faster than humans can review it.