Topic
Use of frontier and open-weight models to discover, triage and remediate software vulnerabilities, and the resulting shift in attacker-defender economics.
Calif.io showed an untethered jailbreak on an iPhone 18 Pro running iOS 27.0.1 at Hexacon in Paris, with root access returning after a reboot. No bugs are named and no tool is public, so patch timing turns largely on when Calif publishes.
Reality
XBOW chained three unknown Chrome bugs into a Windows exploit that runs on page load, built in six days with a public OpenAI model, it said. Google fixed all three and paid its $250,000 top reward; the fixes apply only after Chrome restarts.
Perspective Coverage
4 publishersReality
Linux kernel flaw CVE-2026-99999 let pwn.ai's Paulos Yibelo read about 32 bytes of host memory per packet from Vercel's production sandboxes. Operators who host other people's VMs need the fix in the kernel the host itself runs.
Reality
Microsoft's October Patch Tuesday fixes CVE-2026-96951, an exploited Windows Shell zero-day rated CVSS 8.8 that strips Mark-of-the-Web from files. A dev.to analysis counts it as the third such bypass this year.
Reality
RippleX fixed a 2015-era XRP Ledger bug that let one payment create spendable XRP beyond the token's 100 billion supply cap. Both built-in safeguards would have missed it, so the cap's record on public networks rests on RippleX's finding of no exploitation.
Reality
OpenSSH 10.6, released October 6, turns off the LZ77 coder in SSH compression to block an attack that reads one channel's secrets from another. Hosts using the Compression option will get less from it, so the project suggests compressing in the application.
Perspective Coverage
5 publishersReality
VulnCheck says attackers are probing internet-facing Rejetto HFS servers for CVE-2026-61500, a signing-key flaw that gives full administrative control. The bug affects HFS 3.0.0 through 3.2.0, and the fix shipped in 3.2.1.
Reality
Apple's emergency macOS update on August 6 fixed a Screen Sharing flaw that calif.io turned into a working exploit about four hours later. The flaw let anyone on the network sign in without a password, and the service answering those connections runs as root.
Reality
Rejetto HFS 3.0.0 through 3.2.0 signs session cookies with a Math.random() key, and five leaked PRNG outputs let an attacker forge an admin session. Exploitation began on October 1, and version 3.2.1 restores secure key generation.
Reality
Horizon3 used Anthropic's Mythos model to find CVE-2026-61500, a chain that forges Rejetto HFS admin sessions and reaches remote code execution. The firm expects frontier models to make deeper, less reliable bug classes worth weaponizing at scale.
Reality
GitHub Security Lab says its open-source LLM taskflows have found and reported 24 Android app vulnerabilities by auditing code in staged steps. Teams with a GitHub Copilot license can point the same audit at their own repositories.
Reality
GitHub Security Lab's Kevin Stubbings used AI audit workflows to find and report 24 Android app flaws, among them bugs in OsmAnd and Wikipedia. The workflows are free to run on any repository, so the same audit is open to defenders and attackers alike.
Reality
CERT Polska dated successful attacks to at least September 2 and published its warning on September 5, so operators who deferred the RouterOS update have three days of configuration changes to read as well as a patch to install.
Perspective Coverage
8 publishersReality
Calif's WeWorm abused a memory corruption bug in WeChat's VoIP stack to take over accounts on an iPhone 17e and two Pixel 10a handsets, and Tencent blocked it server-side on 28 August without publishing an advisory or a CVE.
Perspective Coverage
6 publishersReality
Fixes are in for four Linux local-root bugs found in code more than a decade old. Turning off unprivileged user namespaces closes three of them. The fourth stays open.
Reality
The fixes are already upstream, so the work now is confirming your distribution shipped them before someone with a low-privileged shell on a shared host uses the published code to reach root.
Reality
Chainguard says fix generation was never its bottleneck and that responsible disclosure at scale is, so its first public batch is built from bugs upstreams quietly fixed years ago and never filed CVEs for.
Reality
A researcher ran the same FreeBSD scan through base and abliterated open-weight builds and found the uncensored ones graduating three to four times as many findings, while the most aggressive one never surfaced the actual CVE.
Reality
Jordy Zomer built a Datalog engine so an agent maintains what it currently knows instead of searching its own transcript, and his own benchmark runs put the weak link in the model that writes the facts.
Reality
Kaspersky's Q2 2026 figures credit AI with both writing the bugs and finding them. The disclosures carrying working exploit code never got a CVE identifier at all.
Reality
Invest · August 25, 2026 · Confirmed3 publishers