GitHub AI Uncovers 24 Android Flaws

🔥 What happened GitHub's Security Lab used its open-source Taskflow Agent to surface 24 Android vulnerabilities — including a tracking-data leak in OsmAnd and an account takeover in Wikipedia's Android app. A single scan runs one to two hours. 💡 Why it matters The agent requires a GitHub Copilot subscription and burns serious tokens — one prompt triggers multiple tool calls. Still, 24 findings in one pass is a shot across the bow of traditional bug-bounty programs. ⚡ Our take AI as a security intern with infinite stamina — but its risk scoring is garbage. Without a human filter, it just generates bug spam.