woke up abruptly with this on my mind: OM*G they absolutely used copilot or some other agent to write the fixes for all these CVEs.

I'm not one of the performative outragers, but I do read All The Things every day, and there are enough legit well-done studies to show that none of these AI-based "go fix this vuln" systems work as well as advertised.

The patches for a sizeable chunk of these CVEs are gonna have their own CVEs in short order.