Cloudflare’s Prince Expects “a Couple Years” of AI-Found Bug Crises

More fire drills are coming, the people Reuters interviewed agree. How bad they get is disputed.

Cloudflare CEO Matthew Prince told Reuters he was aware of “a bunch of additional severe vulnerabilities that are present in other pieces of critical software.” He predicted busy months as AI surfaces long-hidden weaknesses. “I think we’re going to have a couple years where every single week it’s going to feel like the sky is falling,” he said. @kimmonismus calls it just the beginning.

Reuters ties the warning to this week’s outages on government websites after weaknesses were found in PHP. It cites VulnCheck research, due out in the coming days, saying AI helped drive a doubling of the flaws discovered year on year.

Not everyone Reuters spoke to expects a free-for-all. Curl’s lead developer, Daniel Stenberg, argued that AI-found vulnerabilities tend to be exotic bugs that are hard for attackers to use.