AI FOUND 12 OF 12 OPENSSL ZERO-DAYS (WHILE CURL CANCELLED ITS BUG BOUNTY)

Summary from the TLDR InfoSec newsletter

AISLE's AI system discovered all 12 zero-day vulnerabilities in OpenSSL's January 2026 security release, marking the first real-world demonstration of AI-based vulnerability discovery at industrial scale. The findings span multiple subsystems and include vulnerabilities that remained undetected for up to 27 years, bringing AISLE's total to 13 of 14 CVE-2025-* vulnerabilities discovered in OpenSSL plus 5 genuine CVEs in curl. This achievement contrasts sharply with curl's cancellation of its bug bounty program due to overwhelming AI-generated spam, illustrating how AI simultaneously collapses median submission quality while raising the ceiling for sophisticated vulnerability discovery in critical infrastructure.