Google's AI Bug Hunter, Big Sleep, Unearths 20 Vulnerabilities

Google's AI-powered vulnerability researcher, Big Sleep, a collaboration between DeepMind and Project Zero, has reported its first batch of vulnerabilities – 20 flaws in popular open-source software like FFmpeg and ImageMagick. While details remain undisclosed pending fixes, the achievement showcases the potential of AI in automated vulnerability discovery. Although human experts reviewed the findings, Big Sleep independently identified and reproduced the vulnerabilities. This breakthrough, however, highlights concerns about AI-generated false positives, emphasizing the need for careful evaluation of AI-driven bug reports.