Using AI to Discover Silently Patched Vulnerabilities in Open...

Using AI to Discover Silently Patched Vulnerabilities in Open Source Mackenzie Jackson We monitored public changelogs of popular open-source projects to detect unreported security fixes. We found 600+ vulnerabilities, 25% high or critical, with mos...

Using AI to Discover Silently Patched Vulnerabilities in Open Source

Mackenzie Jackson

We monitored public changelogs of popular open-source projects to detect unreported security fixes. We found 600+ vulnerabilities, 25% high or critical, with most never being reported. We achieved this by using dual LLM models to monitor change logs and verify the result with our security engineers.

https://bsidessf2025.sched.com/event/b9139fc188880e2cd01533d0db872251