When vendor-supplied support matters: How AI is changing the open source security equation

The New Stack · 2 months ago · 10 ● 2 sources

Frontier AI models are discovering open source vulnerabilities much faster than maintainers can fix them, shifting the bottleneck from finding bugs to producing reliable patches. The Spring portfolio saw security reports jump from 7 per month historically to 112 in April, with internal AI scans adding 370 more findings in the same month. Organizations now prioritize vendor support from original maintainers, who can patch privately and release coordinated fixes across projects in a single day rather than two weeks, making first-party expertise critical for enterprise security.