Storia in 2 fonti

AI slop is flooding the CVE pipeline with fake flaws

JFrog found 54 of 55 CVEs from one GitHub repo were AI-invented fiction, yet they reached the US government's official database. AI coding agents are the marks.

Raccontata da

theregister.com

thenextweb.com

Confronto fonti

2 prospettive sulla stessa storia

AI · summaries

thenextweb.comStai leggendo4 h fa

AI slop is flooding the CVE pipeline with fake flaws

JFrog discovered 54 fake AI-generated CVEs in the US National Vulnerability Database, all rated critical despite referencing functions that never existed. Security teams using AI agents to patch CVEs now risk injecting real bugs into working code while chasing phantom flaws.

originale

theregister.com23 h fa

AI slop pollutes the CVE pipeline with fake vulns

JFrog discovered 54 AI-fake CVEs (CVSS 9.1-9.8); NIST backlog: 27,000. The pipeline lacks mandatory PoC verification, so fake advisories reach GitHub/enterprise scanners, wasting security teams on false positives.

Leggi questa versione →

Timeline cronologica

lunedì 3 agosto 2026·theregister.com
AI slop pollutes the CVE pipeline with fake vulns
With NIST still buried under its backlog, expect AI-generated bogus reports to continue
martedì 4 agosto 2026·thenextweb.com
AI slop is flooding the CVE pipeline with fake flaws
JFrog found 54 of 55 CVEs from one GitHub repo were AI-invented fiction, yet they reached the US government's official database. AI coding agents are the marks.