AI Weekly's Issue #540 reports that AI is finding software flaws faster than teams can fix them. The newsletter cites several examples.
Microsoft's October update fixed more than 1,400 security vulnerabilities, according to KrebsOnSecurity. That brings its 2026 total past 4,000. The previous record year was 2020, with 1,261. Microsoft credits large language models for the high volume of bug discovery.
Four researchers at the security startup Xbow used OpenAI's GPT-5.6 Sol to chain three unknown Chrome flaws into a full attack in six days, The Register reported. The newsletter says it cost about $40,000 in model charges. Google paid its top Chrome reward, $250,000, and has fixed all three flaws. The fix applies only after Chrome is restarted.
PostgreSQL 19 is now expected around November 19, instead of late September or early October, The Register reported. Reviews done with LLMs found problems late in testing, and between eight and 10 significant features were pulled, including SQL property graph queries.
The newsletter's takeaway for software operators is that AI scanning is cheap, but each flaw it finds still needs a person to fix and test it.
The same issue also cov