First screen, captured 3 days ago. Hover to scroll the page, or open the video.

Is this the new cyber normal?

What HN thinks

Patch Tuesday has become Patch Every Twenty Minutes, and the defenders would like their weekends back.

Yes, new normal for defenders
LLMs both surface more critical bugs and collapse the time from disclosure to exploitation, leaving smaller operators without embargo access scrambling; coordinated disclosure may not survive.
Temporary backlog, will settle
We're clearing decades of human-written bugs; once AI audits new code the flood should slow, though critics note code keeps changing and bugs may not be finite.
AI code adds new holes
Commenters argue over whether AI-generated code is insecure; some cite SQL injection and missing auth from current models, others say old studies are obsolete and frontier models are defensive.

Consensus: Most agree the current wave is real and that everyone should run LLMs over their own code and patch faster, but there is no consensus on whether this is permanent or a transition period.

Recommended in the comments

Dependabot (service): Suggested as the model for forge-wide automated security patching of mature software.
DeepSeek (service): One commenter used it cheaply to upgrade exploitable PHP 7 code to patched PHP 8.3 in minutes.

Summarised by Claude from the comment thread 2 days ago.