Microsoft FORGE Finds 59 Linux Bugs

AI vulnerability discovery is scaling faster than humans can triage, validate, patch, and review the results.

• –Only 59 of 621 PoC-backed cases became distinct upstream reports, underscoring the importance of expert filtering.
• –The average bug was 8.1 years old, showing how AI can expose long-lived weaknesses in foundational software.
• –Human researchers and maintainers remained the bottleneck, with fixes taking a median of 41 days to reach mainline.
• –The practical win is not autonomous security; it is concentrating scarce security expertise on higher-confidence findings.