AI Uncovers 990 e-Gov Software Vulnerabilities in Korea

An artificial intelligence security project has uncovered 990 security vulnerabilities in Korea's e-government standard software. This public interest initiative, called Project Canopy, used an AI-based analysis engine to find these flaws. The project focused on the e-Government Standard Framework, which is widely used across government and public institutions. Out of over 1,300 potential issues, 990 structural defects and security vulnerabilities were identified. Ten percent of these were classified as "critical" or "high" severity. Major vulnerabilities included ways to log in without a password, manipulate databases, and steal files. Project Canopy notes that the e-government framework's structure makes it difficult to update, leading to a "patch isolation" problem where security fixes don't reach operating systems. The project has already completed over 300 security patches. It plans to continue analyzing major open-source software. This effort aims to build a safer ecosystem across the public software supply chain.