Bitcoin Core adjusts its security vulnerability disclosure policy, fixing vulnerabilities that are easily discovered by AI as soon as possible Odaily Planet Daily News: Bitcoin Core has adjusted its security vulnerability disclosure policy, defining easily detectable vulnerabilities as those that can be discovered through simple large language model prompts, and will release fixes as soon as possible in all major versions that are still under maintenance, while also issuing security notices. Bitcoin Core developer Antoine Poinsot stated that in the past, vulnerabilities were usually kept confidential during longer disclosure bans for users to upgrade, but the large language model lowered the threshold for rediscovering some vulnerabilities, and the protective effect of delayed fixes was limited. Low risk vulnerabilities will be disclosed two weeks after the release of the major version that includes fixes; Medium to high-risk vulnerabilities will be disclosed two weeks after the end of the lifecycle of the affected version, usually about a year after the fix enters the new version. Critical vulnerabilities are not subject to standard policies and will be addressed through temporary procedures. In August, the volunteer organization Bitcoin Red Team reported nearly 5000 potential issues in 390 projects, with about one-fifth of them having already been replicated. The developers of Core Lightning requested node operators to upgrade or take down nodes in the same month, and postponed the disclosure of technical details for two weeks.