CSO Online پنجشنبه ۱۴ آبان ۱۴۰۵ · ۲۱:۱۸

OpenAI built an AI pipeline to find, exploit and patch Linux flaws

OpenAI has developed an autonomous AI pipeline that can identify software vulnerabilities, develop working exploits to validate their impact and generate patches for human review. In an October experiment targeting the Linux kernel, the pipeline created exploits for 948 distinct local privilege-escalation (LPE) vulnerabilities at a total API cost of $1.2 million, the company said in a November 4 research report, “A t…

Vulnerabilities & Zero-Day Cloud Security AI Security AI & Machine Learning DevOps & Infrastructure Operating Systems Open Source

Read the full article at CSO Online Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

The Register - Security پنجشنبه ۱۴ آبان ۱۴۰۵ · ۲۱:۵۹

Get root on a musl Linux system by slamming it with an overly long password

Decade-old vulnerability in OpenSSH is now fixed, so get a-patchin'

Vulnerabilities & Zero-Day Operating Systems

Source

Orca Security پنجشنبه ۱۴ آبان ۱۴۰۵ · ۲۱:۳۹

*sshole: OpenSSH Authentication Bypass Gives Attackers Root on Alpine Linux

A critical authentication bypass, with no CVE assigned yet, was disclosed in OpenSSH on musl-based Linux distributions such as Alpine. An unauthenticated attacker can log in over SSH password authentication as an account that should not accept passwords at all, including root. On a default Alpine install that means root access from a single connection, […]

Vulnerabilities & Zero-Day Operating Systems Identity & Access Security

Source

BleepingComputer پنجشنبه ۱۴ آبان ۱۴۰۵ · ۲۱:۱۵

OpenSSH flaw lets attackers log into password-disabled Linux accounts

A newly disclosed OpenSSH vulnerability dubbed "*sshole" allows attackers to log in to certain Alpine Linux and other musl-based Linux accounts that are configured to block password authentication, simply by entering an oversized password. [...]

Vulnerabilities & Zero-Day Operating Systems Identity & Access Security

Source

SecurityWeek پنجشنبه ۱۴ آبان ۱۴۰۵ · ۲۱:۰۲

AI Agents Got Root on Linux via 948 Kernel Flaws in OpenAI Research

An unreleased OpenAI cyber model found and exploited 948 distinct Linux kernel privilege escalation bugs for about $1.2 million. The post AI Agents Got Root on Linux via 948 Kernel Flaws in OpenAI Research appeared first on SecurityWeek.

Vulnerabilities & Zero-Day AI Security AI & Machine Learning

Source