Loading story…
Researchers working with the FreeBSD project disclosed an AI-assisted security audit that found 15 kernel vulnerabilities, including five local privilege escalation flaws, one bhyve guest-to-host escape, and multiple memory disclosure and denial-of-service issues. The effort was coordinated directly with FreeBSD maintainers, with the researchers saying many reports moved from disclosure to fix within days and that the goal was to surface serious, actionable bugs rather than inflate vulnerability counts.
The researchers also publicly released exploits and AI-generated writeups for three verified local privilege escalation vulnerabilities: CVE-2026-45250, CVE-2026-45253, and CVE-2026-45251. They said their workflow focused on reporting only high- and critical-severity issues, keeping submissions concise, and optionally proposing patches while maintaining direct communication with maintainers; they added that similar AI-assisted auditing is underway for other open-source infrastructure projects.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
2 events from the most recent confirmed update back to the earliest known activity.
Researchers conducting an AI-assisted audit said they reported 15 FreeBSD kernel bugs to the FreeBSD team, including five local privilege escalations, one bhyve guest-to-host escape, and several memory disclosure and denial-of-service issues. The reports were coordinated directly with FreeBSD maintainers, and many reportedly moved from disclosure to fix within days.
On 2026-05-28, the researchers published exploits and writeups for three verified local privilege escalation flaws in FreeBSD: CVE-2026-45250, CVE-2026-45253, and CVE-2026-45251. The writeups were described as AI-generated.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Reports claim Anthropic’s Claude was used to identify and weaponize **CVE-2026-4747**, a FreeBSD kernel vulnerability in the `RPCSEC_GSS` component used for Kerberos authentication in NFS servers. The flaw reportedly allowed an unauthenticated attacker to trigger a stack buffer overflow and gain remote code execution, ultimately obtaining a **root shell** on unpatched systems. A social media post and a Forbes report both describe the incident as a notable milestone in AI-assisted offensive security, with the advisory crediting Nicholas Carlini using Claude for discovering the bug. According to the Forbes account, an autonomous AI workflow analyzed the published advisory and produced two working exploits in roughly four hours, moving from vulnerability identification to practical exploitation without the extended manual effort typically required for kernel exploit development. The report argues that this sharply reduces the time between disclosure and weaponization and raises pressure on defenders to accelerate patching, continuous code auditing, and AI-assisted detection and response as similar systems are reportedly being applied to find hundreds of additional high-severity flaws.
Jun 29, 2026
FreeBSD released security updates for **22 vulnerabilities** across the operating system, including multiple flaws that could lead to **remote code execution**, **local privilege escalation to root**, **denial of service**, **memory corruption**, and **information disclosure**. The most severe issue, **`CVE-2026-49420`**, affects `libalias`, where improper handling of **RTSP** traffic during NAT processing can allow **remote code execution as root** on systems using **`ipfw` NAT** or **`natd`**. The fixes were shipped in **FreeBSD 15.1-RELEASE-p1**, **15.0-RELEASE-p11**, **14.4-RELEASE-p7**, and **14.3-RELEASE-p16**. Additional patched components include `execve`, **Jail**, **OpenZFS**, **Linuxulator**, **KTLS**, `sound`, `vt`, `ptrace`, IPv6 multicast filtering, `tcp_rack`, `compat32`, `iconv`, and pathname resolution protections such as **`AT_RESOLVE_BENEATH`**, with the advisory noting that **13 of the issues** could enable privilege escalation to root.
Jul 7, 2026
Anthropic disclosed that its **Claude Mythos Preview** model autonomously discovered and, in some cases, exploited vulnerabilities across major software targets, including **Firefox**, **OpenBSD**, **FreeBSD**, **Linux**, **FFmpeg**, cryptography libraries, and a memory-safe virtual machine monitor. The company said the system produced browser exploit chains involving JIT heap sprays and sandbox escapes, chained Linux kernel flaws into local privilege escalation, and developed a fully autonomous exploit for **`CVE-2026-4747`**, a FreeBSD NFS issue that reportedly enables unauthenticated remote root access. Anthropic said most findings remain under coordinated disclosure because fewer than 1% had been patched at the time of publication. Publicly described examples included a **27-year-old OpenBSD SACK denial-of-service bug** that was later addressed in an OpenBSD patch, and a **16-year-old FFmpeg H.264 out-of-bounds write**. Anthropic also said it partnered with Mozilla to improve Firefox security, underscoring that modern AI systems are now capable of meaningful autonomous vulnerability research against widely deployed platforms. To limit immediate misuse, the company withheld most technical details and published **SHA-3 commitments** for future disclosure while urging defenders to accelerate AI-assisted bug hunting, patching, disclosure coordination, and incident-response automation.
Jul 28, 2026