So do these stats tell us that < 10% of the Critical security bugs being found are being…
This is a dev post classified by Jev as Security (an opinion), kept by the Dev Radar because it carries real work, not commentary.
So do these stats tell us that < 10% of the Critical security bugs being found are being found via Glasswing? Doesn't that make the case that access to the program is too narrow?
Posted by Ramez Naam (59.9k followers) 20 h ago · 5 likes · 1.8k views · view the original post on X. Kept by the Dev Radar as Security. Tools mentioned: anthropic-credited-cves.
More dev work like this
- 🚨SlowMist TI Alert🚨 — @SlowMist_Team
- Yep — @thorstenball
- 🚨SlowMist TI Alert: TraderTraitor Resurfaces via Weaponized Terraform Projects🚨 — @SlowMist_Team
- AI Agent 会写代码、会搜资料，但遇到真实安全事件，很多时候还是不知道该从哪里下手。 — @bkdgiffug
- Here's an API security question I wish every developer would ask: — @shehackspurple
- Theorem co-founder @diagram_chaser reveals the one-line change that took verifying… — @MTSlive
- 80–90% of modern applications rely on open-source code you didn't write - making… — @jfrog
- One of my favorite lessons from #Plugin4Shell has almost nothing to do with AI. — @shehackspurple
Every post is read and classified by Jev (TypeSafe): what it is, which market it belongs to, and whether the link is a real tool. 20.7k posts from 4.9k X accounts over the last 21 days, 2.4k tools, 12 markets. Collected every 5 minutes, fully re-ranked every hour — last update 2026-09-22 08:21 UTC. Full method.