… The FreeBSD Security Team will be using publicly-available large language models while some of those involved also have access to Clade Mythos via Project Glasswing. More details on this new AI-assisted vulnerability discovery initiative for FreeBSD can be found via FreeBSDFoundation.org . …
… AI-driven security research firm Calif.io along with other parties discovered a kernel use-after-free via file descriptor system calls. Meanwhile others using GLM-5.1 from Z.ai found missing validation in ptrace PT SC REMOTE that can allow unprivileged local users to escalate privileges to root. …
… These latest security vulnerabilities were uncovered using AI... In particular, Trend Micro's TrendAI Zero Day Initiative. TrendAI found eight of the nine vulnerabilities made public today with longtime X.Org input developer Peter Hutterer of Red Hat discovering the ninth. …
… The Akrites project is aiming to help defend critical open-source software from the brisk pace of new AI/LLM-discovered software bugs and vulnerabilities in ensuring that said issues are effectively addressed before they can be exploited by bad actors. …
… FreeBSD 15.1 Released With Updated WiFi Drivers, Better C23 Support & Other Improvements FreeBSD Receives Funding To Launch AI-Assisted Vulnerability Discovery FreeBSD 15.1 Delayed To Mid-June Due To Critical x86 Bug Fixes FreeBSD 15.1-RC2 Restores PadLock RNG For VIA & Zhaoxin CPUs FreeBSD Foundat…
… FreeBSD Receives Funding To Launch AI-Assisted Vulnerability Discovery FreeBSD 15.1 Delayed To Mid-June Due To Critical x86 Bug Fixes FreeBSD 15.1-RC2 Restores PadLock RNG For VIA & Zhaoxin CPUs FreeBSD Foundation Executive Director Tries Daily Driving FreeBSD On Laptop FreeBSD 15.1-RC1 Released: F…
… Stemming from the recent influx of security bugs to the Linux kernel as well as an uptick in bug and security reports from discoveries made in full or in part with AI, additional documentation was warranted. …
… Outside of pure code, Linux 7.1-rc4 includes new documentation what counts as a security bug and also responsible AI use around Linux kernel development and discovering of possible security issues. …
… Boichat discovered those latest malware bits using a local Gemma E2B AI model. …
… Eric Biggers explains in a patch queued to the kernel's cryptographic subsystem "cryptodev" tree: "AF ALG is almost completely unnecessary, and it exposes a massive attack surface that hasn't been standing up to modern vulnerability discovery tools. …