Vulnerability reports, on their own, do not protect anyone. The value comes from validating the issue, understanding its impact, developing and testing a patch, coordinating disclosure, and helping teams deploy the fix.
大多数人认为发现并报告漏洞本身就提供了安全价值，但作者明确表示，单纯的漏洞报告并不能保护任何人。这一观点挑战了安全行业普遍重视漏洞数量而非修复质量的共识，强调了从发现到修复的完整流程才是真正有价值的部分。
The bottleneck in cybersecurity is now verifying, disclosing, and patching the large numbers of vulnerabilities that Mythos-class models can surface.
大多数人认为网络安全的主要挑战是发现漏洞，但作者认为真正的瓶颈在于修复和修补这些漏洞，这颠覆了传统网络安全优先级的认知。
select known-vulnerable dependency versions 50% more often than humans.
这一统计洞察颠覆了“AI写代码更安全”的迷思。AI代理在优化代码功能性时，往往以牺牲安全性为代价，倾向于选择存在已知漏洞的旧版本依赖。这反映出当前AI模型在训练时对安全维度的忽视，也警示我们在AI辅助开发流程中必须强制引入自动化的安全卡点。
Reher, D. S., Requena, M., de Santis, G., Esteve, A., Bacci, M. L., Padyab, M., & Sandström, G. (2020). The COVID-19 pandemic in an aging world [Preprint]. SocArXiv. https://doi.org/10.31235/osf.io/bfvxt
Cortese, S., Asherson, P., Sonuga-Barke, E., Banaschewski, T., Brandeis, D., Buitelaar, J., Coghill, D., Daley, D., Danckaerts, M., Dittmann, R. W., Doepfner, M., Ferrin, M., Hollis, C., Holtmann, M., Konofal, E., Lecendreux, M., Santosh, P., Rothenberger, A., Soutullo, C., … Simonoff, E. (2020). ADHD management during the COVID-19 pandemic: Guidance from the European ADHD Guidelines Group. The Lancet Child & Adolescent Health, S2352464220301103. https://doi.org/10.1016/S2352-4642(20)30110-3