AI Bug Reports Overwhelm OpenSSL Reviewers

Oct 21, 2026
OpenSSL now receives about 71 security reports a month, up from nine a year earlier, as AI tools surface more potential flaws than its reviewers can process.

AI tools are helping find flaws in OpenSSL, one of the most widely used encryption libraries, while overwhelming the people who maintain it, Axios reported.

OpenSSL received an average of 71 security reports and inquiries per month between May and July, up from nine in the same period a year earlier, according to Matt Caswell, executive director of the OpenSSL Foundation. In August the figure rose to 108.

The project has grown the number of engineers authorised to approve code changes to 30, from 18, largely through funded roles, but new submissions still arrive faster than it can review them. Caswell said investigating a vulnerability, preparing a patch and publishing an advisory can take six to eight weeks.

The foundation is also using its own AI tools to review code, investigate reports and write tests, while keeping human approval as a requirement for code changes. Maintainers of other encryption libraries, including Bouncy Castle and cryptlib, report a similar rise in reports.

We hope you enjoyed this article

Consider subscribing to one of our newsletters like Cybersecurity AI Weekly or Daily AI Brief.

Also, consider following us on social media:

Cybersecurity AI AI Brief AI Brief (X)
Free newsletter

Cybersecurity AI Weekly

Weekly newsletter about AI in Cybersecurity.

AI Token Webinar

Whitepaper

Tensordyne Napier: What If One Rack Could Do the Work of Nine?

Tensordyne

This Tensordyne whitepaper presents Napier, an inference-focused AI processor and rack-scale system based on the company’s TDN Math logarithmic number system. It examines infrastructure requirements for large mixture-of-experts and agentic models, compares major inference architecture approaches, and details the TDN AIP processor, TDN72 pod, TDN Link fabric, and Napier Ultra configuration. The paper reports simulation-based performance, cost, and accuracy-validation results, including Tensordyne’s projected comparison of one Napier rack with a nine-rack Nvidia Rubin plus Groq deployment; the chip is reported as taped out and in fabrication.

Read more

You may also like

Free, six days a week

Daily AI Brief: the AI news that matters, in your inbox.