AI Lowers Vulnerability Discovery Bar as Ledger CTO Urges Responsible Disclosure

Ledger Chief Technology Officer Charles Guillemet said AI has significantly lowered the barrier to finding vulnerabilities, while the asymmetry between attackers and defenders has weakened. According to Foresight News, he said responsible disclosure is therefore more important, including privately contacting vendors, agreeing on a fix deadline, and disclosing publicly together. Guillemet criticized some actors for bypassing that process to attract attention, including framing already fixed vulnerabilities as ongoing intrusions, revealing details of unpatched flaws too early, and publishing teaser-style leaks to draw interest. He said such behavior amounts to using other people's risk for traffic, and that even without direct financial losses, panic can push users to abandon self-custody. He urged users to keep software updated and maintain basic security habits, while asking researchers to disclose vulnerabilities through vendors' established channels. He also called on the industry to treat coordinated disclosure as a standard and reject attention-seeking behavior. Ledger, Trezor, Foundation Devices, AnchorWatch, and SEAL have all said they support coordinated disclosure as an industry norm for public maintenance.