Google Project Zero Cuts Disclosure Window as LLMs Speed Up Exploits
Google Project Zero is overhauling its vulnerability disclosure policy in direct response to LLMs accelerating both vulnerability discovery and patch-based reverse engineering, compressing the window vendors have to remediate flaws. The new 'Full X' policy eliminates grace periods and most special cases, moving from 90 days now to 30 days by 2028. This marks a structural shift in coordinated disclosure norms driven explicitly by AI-enabled attacker capabilities.