{
 "license": "CC-BY-4.0",
 "attribution": "Fide AI, Agentic Cyber Explorer",
 "url": "https://agentic-cyber-explorer.pages.dev/events/google-big-sleep-20-vulnerabilities-2025/",
 "asOf": "2026-09-26",
 "id": "google-big-sleep-20-vulnerabilities-2025",
 "date": "2025-08-04",
 "datePrecision": "day",
 "title": "Google reports Big Sleep found and reproduced 20 vulnerabilities in open-source projects",
 "lane": "defense",
 "kind": "vulnerability-disclosure",
 "summary": "Google's vice president of security announced that Big Sleep had reported 20 vulnerabilities, mostly in open-source projects such as FFmpeg and ImageMagick, with details withheld pending fixes. A Google spokesperson told TechCrunch each flaw was found and reproduced by the agent without human intervention, with a human expert reviewing reports before submission.",
 "whyItMatters": "It documents a human-in-the-loop reporting model for AI-found bugs at a time when maintainers were complaining about low-quality AI reports.",
 "actors": [
  "google",
  "google-deepmind",
  "google-project-zero",
  "ffmpeg",
  "imagemagick"
 ],
 "topics": [
  "vulnerability-discovery"
 ],
 "atlas": [
  "human-approver"
 ],
 "artifacts": [
  "big-sleep"
 ],
 "sources": [
  {
   "url": "https://x.com/argvee/status/1952390039700431184",
   "publisher": "Heather Adkins, Google (X)",
   "title": "Announcement of the first 20 vulnerabilities found by Big Sleep",
   "date": "2025-08-04",
   "type": "primary",
   "accessed": "2026-09-26"
  },
  {
   "url": "https://techcrunch.com/2025/08/04/google-says-its-ai-based-bug-hunter-found-20-security-vulnerabilities/",
   "publisher": "TechCrunch",
   "title": "Google says its AI-based bug hunter found 20 security vulnerabilities",
   "date": "2025-08-04",
   "type": "secondary",
   "accessed": "2026-09-25"
  }
 ],
 "keyFacts": [
  {
   "fact": "Big Sleep found and reported 20 flaws, mostly in open-source software such as FFmpeg and ImageMagick; issues are tracked on Google's issue tracker, with details withheld until fixes.",
   "locator": "TechCrunch article"
  },
  {
   "fact": "Google spokesperson Kimberly Samra said each vulnerability was found and reproduced by the agent, with a human expert in the loop before reporting.",
   "locator": "TechCrunch article"
  }
 ],
 "significance": 3,
 "fideQuestions": [
  "FID-076"
 ],
 "methods": [
  "ai-vulnerability-discovery"
 ],
 "review": "assistant-drafted",
 "addedOn": "2026-09-25"
}