AI, three at a time · read · watch · listen

Tag

vulnerability-management

7 reads

The Wall Street Journal 2026-10-27-2

AI Hacks Are Coming Thick and Fast and Overwhelming the Internet

Parsons was billed $449 across about 50 charge emails overnight after attackers drained Anthropic and OpenAI credentials stored in OpenCode, and other users reported $1,700. The target was inference spend, so a stored key behaves like a card number. Governments in Canada, Belgium, France and the Netherlands took sites offline rather than wait for patches against bugs that could expose up to 70% of websites, the move Sima's account says stops working once the attacker holds your own keys.

# tags
ai-cybersecurityai-securityagent-securityvulnerability-managementpatch-velocityincident-managementopen-modelskimiopencodecrowdstrikewsj
◆ entities
Risk managementOpen Source StrategyBlast RadiusAgent governanceEnterprise AI security posture
→ threads
ai-cybersecurityai-security
⟷ links
2026-04-01-32026-04-13-32026-05-22-w22026-04-01-12026-05-14-12026-04-05-12026-05-22-32026-04-04-22026-03-13-w32026-05-12-2
permalink
The AI Native Dev (podcast) 2026-10-27-3

Caleb Sima: AI Attackers Move at Machine Speed

Sima argues the old playbook of severing connections to OpenAI and Anthropic fails when the agent borrows internal keys and sessions, and large enterprises with multi-region designs have no single plug to pull. He relays that OpenAI's AI found 400+ Linux root 0-days at about 2.5 hours each. Set against the maze run in the Times piece, his point that sandboxes cannot contain a goal-directed model leaves pre-agreed authority to contain and roll back automatically as the defender's remaining lever.

# tags
ai-securityai-cybersecurityai-defenseagent-securitycontainmentsandboxdeceptionhuman-in-the-looppatch-velocityvulnerability-managementred-teamingmisalignmentagent-governancehugging-facepodcastyoutubeai-practitioner
◆ entities
Blast RadiusAgent ObservabilityAgent governanceHuman-in-the-loop designProduction-readiness
→ threads
ai-securityai-cybersecurity
⟷ links
2026-03-13-w32026-05-01-w22026-05-01-w32026-04-13-32026-03-23-12026-04-10-12026-05-14-12026-05-12-2
permalink
The Wall Street Journal · 2026-10-23 2026-10-23-w3

AI Just Found a Bug That Puts up to 70% of the World's Websites at Risk

PHP2Shell puts a clock on the week's argument. Ryan Austin used GPT-5.6 Sol to take control of in-memory code in as few as a few dozen requests, in a bug class flagged decades ago and dismissed as too hard to exploit. The roughly ten-week embargo, from the Aug 11 call to the Oct 21 patch, broke on one Hacker News post, and a patch of close to 200 files now works as a blueprint. Finding was cheap for the researcher and the attacker alike; absorbing the fix across the long tail of unpatched servers is the slow part. For internet-facing open source, time-to-deploy is measured in hours, so mitigations have to ship before the diff does.

# tags
ai-arms-raceai-cybersecuritycybersecurityopen-sourceopenaipatch-velocityresponsible-disclosuresupply-chain-securityvulnerability-managementwsj
◆ entities
AI safetyAgent governanceOpen Source StrategySystemic riskVerification Infrastructure
→ threads
ai-cybersecuritysupply-chain-security
⟷ links
2026-10-23-12026-10-17-32026-10-20-32026-05-22-32026-03-09-32026-04-01-32026-04-05-12026-03-11-22026-04-22-22026-05-02-32026-05-01-w32026-05-01-w12026-05-22-w2
permalink
The Wall Street Journal 2026-10-23-1

AI Just Found a Bug That Puts up to 70% of the World's Websites at Risk

PHP2Shell had a patch ready and the exposure still sits with the long tail of unpatched PHP servers. Ryan Austin used GPT-5.6 Sol to take control of in-memory code in as few as a few dozen requests, in a bug class flagged decades ago and dismissed as too hard to exploit. The roughly ten-week embargo, from the Aug 11 call to the Oct 21 patch, broke on one Hacker News post. A patch of close to 200 files now doubles as a blueprint, so time-to-deploy is measured in hours.

# tags
ai-cybersecuritycybersecuritypatch-velocityopen-sourcevulnerability-managementresponsible-disclosureopenaisupply-chain-securitywsjai-arms-race
◆ entities
Systemic riskAI safetyOpen Source StrategyAgent governanceVerification Infrastructure
→ threads
ai-cybersecuritysupply-chain-security
⟷ links
2026-05-22-32026-03-09-32026-04-01-32026-04-05-12026-03-11-22026-04-22-22026-05-02-32026-05-01-w32026-05-01-w12026-05-22-w2
permalink
New York Times 2026-05-14-1

Google Says Criminal Hackers Used A.I. to Find a Major Software Flaw

Google's criminal AI zero-day confirms the new attack topology: AI compressed bug discovery to near-zero cost, but the attacker still needed credentials and the patch cycle still ran in days. The asymmetric trade sits in IAM hardening and patch-velocity infrastructure. The AI-security pure-plays are already priced for the headline; the credential layer is what actually moved.

# tags
ai-cybersecuritymythosvulnerability-managementai-policyai-1.0-defensibilitydual-use-researchai-securityanthropicgoogleresponsible-disclosurerestricted-accessai-regulationnytagent-supply-chainai-arms-raceai-policy-capturepatch-velocityoss-security-funding
◆ entities
GoogleAnthropicMythosOktaCyberArkBeyond IdentitySnykChainguardTidelift
→ threads
ai-cybersecurityai-1.0-defensibility
⟷ links
2026-04-04-22026-03-09-32026-04-01-32026-05-12-22026-04-24-w22026-04-22-22026-04-30-22026-05-01-32026-05-05-22026-05-06-32026-05-09-22026-05-09-32026-05-11-22026-05-10-3
permalink
The New York Times 2026-05-12-2

Google Says Criminal Hackers Used A.I. to Find a Major Software Flaw

AI compressed vulnerability discovery to near-zero cost; credentialed access remained the second gate. Google's disclosure of the first criminal AI-enabled zero-day is the empirical confirmation that the offense-side binding constraint has shifted from bug-finding to credential acquisition, which re-rates the IAM stack more cleanly than the AI-security pure-plays. Rob Joyce's "fingerprint at the crime scene" line points to a parallel category in forensic AI-authorship detection that remains structurally unfilled.

# tags
ai-cybersecurityai-securitymythosanthropicgooglevulnerability-managementresponsible-disclosureai-policyrestricted-accessai-1.0-defensibilityai-regulationnytdual-use-researchagent-supply-chainai-arms-raceai-policy-capture
◆ entities
GoogleGoogle Threat Intelligence GroupJohn HultquistRob JoyceNSAAnthropicMythosClaudeGeminiTrump administration
→ threads
ai-cybersecurityai-1.0-defensibilitycredential-security
⟷ links
2026-04-01-32026-04-04-22026-04-01-12026-03-25-12026-03-31-22026-05-05-22026-05-05-32026-05-05-12026-05-06-32026-05-09-22026-05-09-3
permalink
blog.himanshuanand.com 2026-05-11-3

The 90 Day Disclosure Policy Is Dead

Coordinated disclosure was an information-containment regime, and containment fails when discovery diffuses. Eleven independent researchers landed the same critical bug in six weeks; Copy Fail took roughly an hour of AI-assisted scanning to find; Dirty Frag's embargo collapsed within hours via unrelated rediscovery, with Microsoft Defender confirming in-the-wild exploitation a day later. The offense side has integrated LLMs into exploit pipelines. The defense and policy layer largely has not, and that asymmetry is the actual risk — CVE feeds are now lagging artifacts, and patch-diff intelligence is the signal that matters.

# tags
ai-securityai-cybersecurityresponsible-disclosurevulnerability-managementagentic-ai-viabilityai-1.0-defensibilitypilot-to-scaleevalrigai-governancesupply-chain-securitywhitespace-adjacent
◆ entities
Project ZeroLinux kernelCopy FailDirty FragXint CodeTheoriMicrosoft DefenderHackerOneBugcrowdSnykWizClaude MythosProject GlasswingEU CRA
→ threads
ai-securityai-cybersecurity
⟷ links
2026-03-08-22026-03-11-12026-03-24-22026-04-14-12026-04-17-w22026-04-01-32026-04-11-12026-04-25-32026-04-27-32026-05-05-32026-05-08-22026-05-10-12026-05-09-32026-05-10-2
permalink