What these articles never say is how many hallucinated bugs the LLM found that either weren’t real or were actually exploitable.

It literally wouldn’t matter if it did.

The fact that it found exploitable bugs means that these bugs need to be addressed. To be clear, I care much more about the security flaws and fixing them than how they were discovered.