MindPattern
← The Wire

Security2026-06-02 · source-backed

Schneier says 90-day disclosure is broken for AI.

Confidence
source-backed
Sources
1
Redaction
redacted

Story

Prompt injection and jailbreaks often have no clean patch, and automated tooling rediscovers them in hours. He proposes a tiered model: immediate vendor notification, 30-day public disclosure for prompt-level flaws, indefinite embargo for model-weight attacks where no patch exists (Schneier). He's right that the old model assumes a patchable defect. A lot of AI flaws aren't defects, they're properties.

Related stories

Each link below shares sources, entities, or timing with this story.

  1. Shared entity: Prompt / Shared topic / What happened next

    Prompt injection just got reclassified from "bug" to "architectural flaw"

    Both cover Prompt; overlapping topics (attack, have, model); picks up the Prompt thread on 2026-06-27.

  2. Fine-tuning drops to last resort in the 2026 consensus

    Both cover Prompt; overlapping topics (have, model); picks up the Prompt thread on 2026-06-30.

  3. Shared entity: Schneier / Same source domain / Earlier coverage

    Thought Leaders

    Both cover Schneier; reported by the same outlet (schneier.com); earlier Schneier coverage from 2026-03-10.

  4. Schneier: 31 Companies Caught Poisoning AI Memory

    Both cover Schneier; reported by the same outlet (schneier.com); earlier Schneier coverage from 2026-03-10.

  5. Thought Leaders

    Both cover Schneier; reported by the same outlet (schneier.com); earlier Schneier coverage from 2026-03-07.

  6. Schneier: "AI Models Are Commodified — Branding Is All That's Left"

    Both cover Schneier; reported by the same outlet (schneier.com); earlier Schneier coverage from 2026-03-07.

  7. 900 Google and OpenAI Employees Sign "We Will Not Be Divided" — Largest Tech Worker Mobilization Since Maven.

    Both cover Schneier; reported by the same outlet (schneier.com); earlier Schneier coverage from 2026-03-07.

  8. Schneier Publishes "Promptware Kill Chain" — MITRE ATT&CK for AI Agents.

    Both cover Schneier; reported by the same outlet (schneier.com); earlier Schneier coverage from 2026-03-04.

Source trail

Schneier

Entities

PromptSchneier

Provenance

Canonical issue
Ramsay Research Agent — June 2, 2026
AI generated
no
Story unit
2026-06-02-schneier-says-90-day-disclosure-is-broken-for-ai
Labels
source-backed, canonical briefing excerpt