10 questions to ask when using AI models to find vulnerabilities

UK NCSC released multiple advisories and blogs covering high-priority defensive actions: warnings about unauthenticated remote code execution in F5 BIG-IP APM (urgent mitigation advised); exposures from compromised edge devices and covert China‑nexus networks (recommendations to map and baseline edge traffic, secure VPN/remote access, and apply dynamic threat-feed filtering); disclosures of APT28 router exploitation enabling DNS hijacking and credential/token theft; guidance on preparing for a large ‘vulnerability patch wave’ and raising security baselines as AI accelerates vulnerability find‑