
Greg KH talks about LLM generated security reports in Linux kernel
A really good talk about how the news around Mythos and the hype that followed did not show the reality of their claims. Out of 79 reported vulnerabilities - 14 of them were not really a bug and 15 were already fixed in the latest code, only 20 something worth looking at. In that 20 "real" bugs, numerous only worked under assumption of an already malicious actor being present or an untrusted device installed.
Another key thing that he talks about is leaky bots. "Anything it tells you, it will tell someone else" - same bugs ( public or non public ) being reported by different people can cause discomfort in terms of who gets the credit for it.