Back Feeds2.Feedburner

Code review used to be the only way to catch these bugs

Feeds2.Feedburner •Mirko Zorz • August 5, 2026

An automated system called NOVA read the source code of 3,915 open-source projects over two months and came back with 14,090 vulnerabilities, each one confirmed through the system’s validation pipeline. Vulnerability researchers at Palo Alto Networks’ Unit 42 built the system and checked its output against the public record afterward. Only 85 findings matched anything already documented, and most of those were published two to eight weeks after NOVA had found them. The count is … More →

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Palo Alto's NOVA Discovers 14,090 Vulnerabilities in Open-Source Projects Palo Alto Networks' NOVA AI engine identified 14,090 previously unreported vulnerabilities across 3,915 open-source projects over a two-month period. The findings were validated through a rigorous pipeline, revealing that only 85 of these matched existing records, most of which were published shortly after NOVA's discovery. The vulnerabilities span various types of software, highlighting potential risks in widely used open-source code. The company announced these findings at the Black Hat conference alongside the release of PAN-OS 12.2 Ceres, which offers network-level virtual patches to mitigate risks before official vendor fixes are available. This proactive approach aims to enhance security for organizations relying on open-source software. The NOVA system's capabilities underscore the importance of automated vulnerability detection in the cybersecurity landscape. 2 sources 55

Extracted Entities

Ransomware Groups (1)

Nova