Cybersecurity researchers warn of rising trend in broken software patches

Research from Terra Security indicates that software patches are increasingly being used by hackers to create vulnerability ‘maps’. While security updates are essential for safety, they can inadvertently reveal where a bug previously existed and how developers attempted to fix it, potentially pointing attackers toward remaining undefended gaps.

Data shows a significant surge in the rate of broken patches. According to researcher Oren Yomtov, the share of open-source fixes on GitHub that required subsequent patches within 90 days rose from below 0.5% to 2.3%. This represents an eightfold increase compared to previous steady rates.

This trend coincides with a broader boom in identified flaws, partly attributed to the rise of AI-driven security models. The findings suggest that the traditional ‘patch and move on’ approach may no longer be sufficient to maintain robust software security.