… Google found that an AI model likely helped the threat actors discover and exploit the security flaw in the code. Their Python script was very detailed, with tutorial‑style comments and docstrings, and a "hallucinated" CVSS security score that does not match any real entry in official databases. …
… The report from Checkmarx is a bit surprising because we're not used to seeing Android bugs like this anymore. …
… Our point here is not to imply that Jigsaw or ROS conducted the audit in bad faith, but that the words "security audit" are not unilateral proof against a security flaw or bug in non-audited code. …
… Now read: Google Is Making Android Security Updates Mandatory Pixel 3 Bug Adds More Notch to the Screen, Just as We Always Wanted 3D-Printed Head Shows Face Unlock on Most Phones Isn’t Secure