Application security program design

Cheap AI bug hunting collides with the one step that still needs engineers

A J.P. Morgan report counts more than 1,400 AI-generated vulnerability reports that maintainers accepted at roughly 90% validation and mostly did not patch, which moves the budget question from finding to fixing.