Finding a software flaw is not the same as fixing it

What the source reports

Zvi Mowshowitz relays an Internet Archive operator's account. The group took a service offline for a short time. It used AI to help patch older PHP versions and added other defenses. This is one operator's account, not a test of how often AI patches work. Mowshowitz argues that getting fixes to users may be harder than finding new flaws. He calls for steady security work, not panic. His view is not a measured trend across many sites. The AI Agency digest suggests checking official vendor notices and testing changes off the live service. It calls for a person to own the change and a way to undo it. The essay does not show that automatic live patching is safe.