Bitcoin Core speeds up security fixes amid AI advances

Bitcoin Core will now patch easily discoverable vulnerabilities immediately and publish advisories, ending long embargoes due to AI making such bugs easier to find.

Bitcoin Core has updated its security policy in response to advancements in artificial intelligence, especially large language models, which have made it much easier to find certain software vulnerabilities. Previously, details of vulnerabilities were kept under embargo to give users time to update before public disclosure. However, this often delayed fixes for older versions and provided little real protection. With AI tools now able to identify flaws quickly and with minimal effort, the embargo period is seen as less effective. The new policy states that vulnerabilities considered "easily discoverable" by AI will be patched as soon as possible across all maintained versions. Public security advisories will be released alongside these updates. This change aims to reduce user exposure to risks and reflects the evolving cybersecurity landscape, emphasizing the need for immediate transparency in the era of AI-assisted bug discovery.