GoKawiil
Tech News
Python's security developer in residence Seth Larson reports that CVEs for Python and Pip have tripled over the past year, while malware found on PyPI rose 60%. The Python Software Foundation is adding a second security developer, Brett Smith, funded by an Anthropic 'ecosystem security' grant, to help manage vulnerability remediation, CVE reporting, and malware removal.
Chinese AI firm Z.ai's GLM-5.3 model helped find over 1,000 critical vulnerabilities in open-source projects including the Linux kernel, adding to a wave of AI-discovered bugs this year. Kernel maintainer Greg Kroah-Hartman showed data indicating CVEs fixed per kernel release have surged from about 500 to nearly 2,000 as AI code-review tools improve.
After curl founder Daniel Stenberg ran OpenAI's Codex Security and Anthropic's Mythos against the widely-used curl codebase and got zero findings, AISLE's autonomous AI system produced 29 vulnerability reports. Six of those were validated by curl's security team and assigned CVE identifiers, all rated Low severity, and fixed in the newly released curl 8.22.0.
Greg Kroah-Hartman previewed data for his Kernel Recipes 2026 talk in Paris showing that AI and LLM tools scanning the Linux kernel codebase have driven a sharp rise in reported vulnerabilities. Releases that once averaged around 500 fixed CVEs are now approaching 2,000, with Linux 7.3 potentially crossing that mark.