10 questions to ask when using AI models to find vulnerabilities

A recent tranche of UK NCSC posts and advisories covering multiple cyber topics: guidance on using AI for vulnerability discovery and associated security questions; calls to prepare for a large ‘vulnerability patch wave’ and to raise security baselines as AI accelerates vuln discovery; warnings and mitigation advice for covert networks (China‑nexus) and APT28 exploitation of vulnerable edge routers enabling DNS hijacking; an advisory on an unauthenticated RCE affecting F5 BIG‑IP APM; guidance promoting passkeys over passwords; new cross‑domain and NHS resilience guidance; and an NCSC‑engineer‑