Summer of Clearinghouses

The article analyzes the recent proliferation of "clearinghouses" for pre-disclosure open-source vulnerabilities, arguing the core problem is not aggregating findings but actuating fixes at machine speed. It warns that AI-driven discovery is surfacing working exploits in shared dependencies, shrinking the window between disclosure and exploitation, and that effective defense requires large, fast orchestration pipelines that rebuild, test, sign, and upstream fixes — with the ultimate goal of making clearinghouses obsolete through secure-by-design upstream changes.