AI‑Found Zero‑Days Alter Security Norms

Large language models are already able to autonomously find and exploit critical, long‑standing software vulnerabilities, not just suggest fixes. That capability compresses discovery time for serious bugs and scales attack opportunities, forcing defenders to shift from human‑only pen testing to AI‑resistant design, continuous formal verification, and new disclosure/regulatory norms. — If AIs can reliably surface zero‑day flaws (as demonstrated with Ghost and an NFS kernel bug), cybersecurity policy, liability, and software‑development standards need urgent public and regulatory attention.