Ledger chief technology officer Charles Guillemet said that artificial intelligence is making software vulnerabilities faster and cheaper to discover and exploit. He argued that AI’s growing role makes responsible disclosure more important, urging researchers to contact vendors privately before publishing technical details.
📌 AI made finding bugs cheap, but it didn’t make responsible disclosure optional.
Finding and exploiting vulnerabilities has never been easier. A few hours of prompting now does what used to take a skilled researcher weeks. Unfortunately, defenders no longer enjoy the asymmetry…
— Charles Guillemet (@P3b7_) September 7, 2026
Guillemet outlined a coordinated process in which researchers report a flaw, vendors reproduce and acknowledge it, and both sides agree on a remediation window. He cited 90 days as a common baseline, adjustable for severity and fixing capacity, while Trezor publicly backed the responsible-disclosure approach, saying cooperation can strengthen security and protect users. The goal is to give vendors time to ship fixes before details become public.
The issue now is how consistently researchers and vendors follow those timelines as AI lowers the barrier to bug hunting. Disclosure windows must balance rapid patching with eventual transparency, with Guillemet arguing that researchers should publish if a vendor fails to deliver a fix within the agreed period.
Source: Charles Guillemet.
Disclaimer: Crypto Economy Flash News are based on verified public and official sources. Their purpose is to provide fast, factual updates about relevant events in the crypto and blockchain ecosystem.
This information does not constitute financial advice or investment recommendation. Readers are encouraged to verify all details through official project channels before making any related decisions.
