OSS + ELC EU 2026

AI-powered security models have fundamentally changed vulnerability discovery. What once took months of expert auditing now runs continuously at scale, flooding maintainers with vulnerability reports, coordinated disclosure requirements, patch demands, and CVE assignments. The industry celebrates AI finding more bugs; maintainers are drowning in the reports.

This talk examines how maintainers of critical open-source infrastructure can adapt to handle the incoming wave. This requires new processes at all levels of the development process. Maintainers can use AI tooling to help differentiate slop requests from genuine vulnerabilities, use them to help automate and coordinate disclosures, and start proactively searching for these vulnerabilities so they never entered production in the first place. We'll give concrete examples and patterns that you can use to apply to your own works as a maintainer or security researcher.