AI Buries Engineering Teams in Security Fixes
LeadDev, Tuesday, October 20th, 2026
AI is now finding real vulnerabilities at high volume, leaving engineering teams overwhelmed by valid fixes rather than fake reports.
Google paused vulnerability submissions to its open source bug bounty program after a surge of automated reports, its second crackdown this year.
LeadDev reports a shift from bogus AI reports to a high volume of legitimate findings that each need triage and a fix. curl creator Daniel Stenberg says reports arrive at four to five times the 2024 rate, forcing a month-long pause.
He advises teams to run AI scanners on their own code, while managers should avoid overloading teams with findings.