UK gov sites expose 'god-tier' info via AI-found flaws

security researcher chris nesbitt-smith found over 100 serious vulnerabilities in publicly available uk government code, including in the department of health and social care, home office, and department of education. he used claude's opus and sonnet ai models to identify the issues, which included a 'god-tier' vulnerability in the planning inspectorate's code that gave wide access to sensitive data. the uk government's policy of openly publishing code has led to maintenance and improvement neglect due to funding squeezes. the issues have since been addressed, but the incident highlights the risks of poor cyber hygiene.