30
30
55
30
45
42
60
30
30
55
30
55
60
55
60
42
30
30
60
30
55
30
55
55
42
30
30
30
Mythos has made 2026 patching hell. It might make 2027 a breeze
Gartner analyst Craig Lawson argues AI bug-hunters like Anthropic's Mythos have audited major codebases so thoroughly that 2027 could see fewer severe vulnerabilities.
Speaking at Gartner's IT Symposium in Australia, research VP Craig Lawson said AI-driven bug hunting, exemplified by Anthropic's Mythos, is uncovering flaws at unprecedented scale, citing Microsoft shipping over 970 patches in one week and a recent series of CVEs in historically secure OpenBSD. He argued vendors are also using AI to find bugs before release, retiring technical debt and shrinking future zero-day avenues. Lawson predicts 2027 may be the first year with a net drop in vulnerability severity, if not aggregate counts. He also expects AI to enable near-continuous red-teaming and faster fixes, such as generating F5 iRule syntax for virtual patches via Gemini.
28
Most chief audit executives can’t tell you what AI is worth yet
Gartner finds 93% of audit leaders use AI, but 54% of chief audit executives have not started measuring its value.
Gartner polls of 142 and 161 chief audit executives in May found 54% have not started measuring the value of AI in audit, only 7% tie AI to cost metrics, and just 38% have an AI strategy at any level, with 39% more building one. Among 743 respondents, 60% use AI for engagement preplanning and for drafting audit issues or reports, while only 30% apply it to audit testing, where hallucinations carry higher stakes. Unclear expectations for AI tool use (48%) was the most common barrier, ahead of technology and tool problems. Gartner recommends structured use cases for high-value workflows, which 12% of respondents are currently piloting.
12
Sam Altman calls GPT-6 Astra rollout ‘messy’ as enterprise users wait for access
OpenAI's GPT-6 Astra launch hit access problems; Sam Altman apologized as availability gradually expanded from Daybreak partners to Pro, Enterprise, and API users.
GPT-6 Astra, launched September 4 as OpenAI's most advanced model, was initially accessible only to organizations enrolled in its Daybreak cybersecurity program, leaving Plus, Pro, Business, Enterprise, and API users waiting. Altman called the rollout 'messy'; by September 5 access had extended to Pro, Enterprise, and Business Premium users in ChatGPT's Work and Codex products plus the API. Analysts from Gartner and Greyhound Research said the staged rollout highlights the gap between announcement and production availability, urging enterprises to verify actual access levels and strengthen governance, security, and cost controls before adopting Astra's autonomous workflows.
75
55
55
55
55
42
30
30
55
55