Skip to content
arXiv· arXiv:2605.24632· Alfredo Pesoli, Herman Errico, Lorenzo Cavallaro·Indexed by this site · Originally published

Debunking the Mythos myth, or overturning Bugonomics? From zero-day vulnerability asymmetry to defenders' remediation throughput

Demystifying the Mythos or Disrupting Bugonomics? From Zero-Day Asymmetry to Defender Remediation Throughput

AI summary

The paper argues that the recent change in LLM-driven vulnerability discovery is not an increase in zero-day vulnerabilities, but an expansion of defenders' remediation throughput. The argument combines publicly available data from the Anthropic Mythos Preview collaboration with Mozilla Firefox and vulnerability bounty programs. LLMs make candidate generation, code understanding, and similar tasks cheaper, shifting the bottleneck to validation, triage, and remediation; in open source, report volume may increase, while maintainers' validation, funding, and release capacity may not expand in step.

Read originalarxiv.org