{"id":4535,"date":"2026-11-14T22:17:24","date_gmt":"2026-11-14T16:47:24","guid":{"rendered":"https:\/\/bengaluru.wordcamp.org\/2026\/session\/set-an-ai-to-catch-an-ai-wordpress-security-in-the-ai-era\/"},"modified":"2026-11-14T22:17:24","modified_gmt":"2026-11-14T16:47:24","slug":"set-an-ai-to-catch-an-ai-wordpress-security-in-the-ai-era","status":"publish","type":"wcb_session","link":"https:\/\/bengaluru.wordcamp.org\/2026\/session\/set-an-ai-to-catch-an-ai-wordpress-security-in-the-ai-era\/","title":{"rendered":"Set an AI to Catch an AI: WordPress Security in the AI Era"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">For a decade, WordPress core received 20\u201330 security reports a month. In August 2026, it received 773. AI didn\u2019t make WordPress weaker. It made vulnerabilities easier to find, and plugins easier to write and ship.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The WordPress project responded by fighting AI with AI. Every plugin release on WordPress.org now waits through a cooldown while multiple AI models and Jetpack Scan analyze it. In July, that stopped a backdoored update before it reached 20,000 sites. The core security team now uses AI to read, reproduce and triage incoming reports, and to find vulnerabilities in core before anyone reports them. Human researchers still make every final call.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In this lightning talk, we\u2019ll look at how these defenses work, what they don\u2019t cover and how site owners and developers can use the same approach on their own sites: AI reads, humans decide, and you still patch.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>For a decade, WordPress core received 20\u201330 security reports a month. In August 2026, it received 773. AI didn\u2019t make WordPress weaker. It made vulnerabilities easier to find, and plugins easier to write and ship. The WordPress project responded by fighting AI with AI. Every plugin release on WordPress.org now waits through a cooldown while [&hellip;]<\/p>\n","protected":false},"author":20620937,"featured_media":0,"template":"","meta":{"_wcpt_session_time":1795332600,"_wcpt_session_duration":900,"_wcpt_session_type":"session","_wcpt_speaker_id":[4534],"footnotes":""},"session_track":[30],"session_category":[41],"class_list":["post-4535","wcb_session","type-wcb_session","status-publish","hentry","wcb_track-concert-hall","wcb_session_category-lightning-talk"],"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/pheRQg-1b9","session_date_time":{"date":"November 22, 2026","time":"1:00 pm"},"session_speakers":[{"id":"4534","slug":"abhishek-deshpande","name":"Abhishek Deshpande","link":"https:\/\/bengaluru.wordcamp.org\/2026\/speaker\/abhishek-deshpande\/"}],"session_cats_rendered":"Lightning talk","_links":{"self":[{"href":"https:\/\/bengaluru.wordcamp.org\/2026\/wp-json\/wp\/v2\/sessions\/4535","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bengaluru.wordcamp.org\/2026\/wp-json\/wp\/v2\/sessions"}],"about":[{"href":"https:\/\/bengaluru.wordcamp.org\/2026\/wp-json\/wp\/v2\/types\/wcb_session"}],"author":[{"embeddable":true,"href":"https:\/\/bengaluru.wordcamp.org\/2026\/wp-json\/wp\/v2\/users\/20620937"}],"version-history":[{"count":0,"href":"https:\/\/bengaluru.wordcamp.org\/2026\/wp-json\/wp\/v2\/sessions\/4535\/revisions"}],"speakers":[{"embeddable":true,"href":"https:\/\/bengaluru.wordcamp.org\/2026\/wp-json\/wp\/v2\/speakers\/4534"}],"wp:attachment":[{"href":"https:\/\/bengaluru.wordcamp.org\/2026\/wp-json\/wp\/v2\/media?parent=4535"}],"wp:term":[{"taxonomy":"wcb_track","embeddable":true,"href":"https:\/\/bengaluru.wordcamp.org\/2026\/wp-json\/wp\/v2\/session_track?post=4535"},{"taxonomy":"wcb_session_category","embeddable":true,"href":"https:\/\/bengaluru.wordcamp.org\/2026\/wp-json\/wp\/v2\/session_category?post=4535"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}