ai-devtools —

Defending the patch gap against automated attackers

AI models can now identify software vulnerabilities as effectively as top security researchers, and at a speed and scale that was not possible a year ago.

Defending the patch gap against automated attackers

This is ultimately great news for defenders: the defects in software like Firefox are finite, and it seems likely that increasingly powerful models will soon be able to find them all. The Firefox team has worked tirelessly since February to identify and fix subtle bugs with early access to frontier models from Anthropic and OpenAI.

To date, we have shipped more than seven times the number of security fixes compared to the same period in 2025. This result is a testament to the dedication of the Firefox team and the impact of labs putting these capabilities in defenders’ hands first.

This head start has allowed us to apply successive generations of frontier models to the Firefox codebase, each one helping us dig deeper. Attackers now have access to some cyber-capable models, but these models are several generations behind, and the depth of bugs they can find in Firefox has largely been picked clean.

Earlier coverage

Reported by Lobste.rs.

ai-devtoolsjavascriptsecurity

Related coverage

Elsewhere in this edition