There is definitely some truth to this, but I suspect these numbers are inflated quite a bit by all the BS LLM-generated bug reports.
https://hacks.mozilla.org/2026/05/behind-the-scenes-hardening-firefox/
Firefox security team has gone over verified and patched all these bugs. They used to do 30 a month and then they got access to mythos and found 70 bugs then last month they found 423
I really worry for developers if they are going to get bombarded with hundreds of "P0" incidents that must be fixed immediately. The pressure on developers is bad enough as is.
One real concern I have is that there are now automated tools that can read a patch, and the maintainer's release notes with a description of a security vulnerability fixed by that patch, and then create a working exploit of the pre-patch vulnerability.
In that particular moment, you know that a vulnerability exists and that it was serious enough to be described in release notes, and you can compare two code versions, one that is secure and one that is not. From there, any AI coding agent is working towards something that definitely exists, with a bunch of description of what it might be.
So that means that the window between when a patch is released and when users actually apply that patch is going to be more important than ever. Downstream maintainers will be under a lot of time pressure to implement changes from upstream, because every new security patch will create a race to create 1-day exploits for everyone using that software.
Open source is going to need to move slower I think. They won't be able to take advantage of ai to speed up development because there is a bigger risk for pushing a bad release.
I am curious about what will happen next month. Will Mythos find 500-1000 new bugs or will Mozilla have fixed every bug pattern Mythos knows and they will get few if any additional bugs? Will Mythos start hallucinating bugs or suggesting exploits that require an impossible coincidence to occur?
A community for everything relating to the GNU/Linux operating system (except the memes!)
Also, check out:
Original icon base courtesy of lewing@isc.tamu.edu and The GIMP