… It’s the first time Google has found evidence that AI was involved in an attack like this, although Google’s researchers note that they “do not believe Gemini was used.” Google says it was able to “disrupt” this particular exploit, but also says hackers are increasingly using AI to find and take ad… …
Similar to the “Copy Fail” exploit revealed a week ago, the two “Dirty Frag” exploits CVE-2026-43284 also allow a local user to give themselves root privileges on nearly any Linux distribution. …
… Mythos represents a step up at writing exploits, but current models are capable, too. Security researchers are already using more widely available models to report vulnerabilities to vendors before they’re exploited in the wild. …
… They’ve employed people who have publicly posted zero-day exploits, some with criminal hacking convictions on their record. Microsoft has also purchased exploits from brokers. …
… It’s not clear exactly what AI model helped find the issue, though. “Notably, this is one of the first critical vulnerabilities discovered in closed-source binaries using AI, highlighting a shift in how these flaws are identified,” says Sagi Tzadik, a security researcher at Wiz. …
… According to a blog post, Taeyang Lee had an idea of looking into the crypto subsystem of Linux and created this prompt to run an automated scan that identified several vulnerabilities in “about an hour.” “This is the linux crypto/ subsystem. …
Claude Security uses the Opus 4.7 model to scan a business’s codebase for vulnerabilities and issue a fix. …
… As AI agents, which are capable of acting autonomously, become more common, so too will attacks using social manipulation rather than technical exploits. …
… Claude Security uses the Opus 4.7 model to scan a business’s codebase for vulnerabilities and issue a fix. …
… The hack was the latest in a widening class of exploits using conversation as a weapon to trick or steer a chatbot past its own boundaries. …