InfoQ 中文T2·78 pts
- AI agents compress the time window from vulnerability disclosure to exploitation from days/weeks to minutes, invalidating traditional confidentiality protocols.
- Empirical data shows GPT-4 achieves an 87% exploit success rate based on CVE descriptions, proving public information suffices for automated attacks.
- Open source maintainers must shift from 'hiding details' to 'defense-first', including shortening embargo periods, accelerating patches, and implementing server-side protections.