Tagged:

3 posts

• Coordinated Vulnerability Disclosure for AI Models — A Field Still Making Its Rules

  Traditional CVD is well-established for software vulnerabilities. AI models break nearly every assumption it rests on. Here's where the security community stands — and what a workable disclosure framework might look like.

  Jun 27, 2026 vulnerability-disclosure ai-safety responsible-disclosure bug-bounty policy

• AI Is Breaking Two Vulnerability Cultures: A Practitioner's Read

  Coordinated disclosure and Linux's 'bugs are bugs' approach have coexisted for decades. AI-assisted vulnerability scanning is quietly dismantling both — and the Copy Fail incident shows what the new equilibrium might look like.

  Jun 20, 2026 responsible-disclosure threat-modeling vulnerability-research defense-patterns threat-intelligence

• 1,000 Breaches Later: The Disclosure Lag Is Worse Than Ever

  Troy Hunt's HIBP milestone analysis shows breach disclosure times are lengthening, not shrinking — driven by class-action fear, legal posturing, and regulatory carve-outs. The same dynamics will shape how AI incidents get disclosed.

  Jun 18, 2026 incident-response threat-modeling responsible-disclosure privacy defense-patterns