Loading story…
Advanced AI systems are rapidly changing vulnerability research and exploit development, with new reports showing they can move beyond bug discovery into practical weaponization. Hacktron said OpenAI's GPT-5.6 Sol Ultra built a full Google Chrome exploit chain from public V8 patch commits, progressing from browser primitives to sandbox escape and native code execution, while researchers and industry observers reported that modern models can now triage crashes, identify root causes, assess exploitability, and propose fixes at scale. Mozilla reportedly used a frontier model to help uncover and patch 271 vulnerabilities in a single Firefox release, but maintainers have also faced a surge of duplicate AI-assisted submissions that strain existing workflows.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
6 events from the most recent confirmed update back to the earliest known activity.
South Korea said it is developing a sovereign, security-focused AI model to provide domestic bug-finding capabilities and reduce reliance on foreign providers, citing prior U.S. restrictions on access to Anthropic's Mythos as a strategic warning.
Earlier in 2026, Mozilla used a frontier AI model to uncover and patch 271 vulnerabilities in a single Firefox release, illustrating AI's growing role in vulnerability research and remediation.
In May 2026, Linux kernel maintainers clarified vulnerability submission guidance after a surge of duplicate AI-assisted reports created operational strain for maintainers.
Hacktron reported that OpenAI's GPT-5.6 Sol Ultra autonomously constructed a complete Google Chrome exploit chain from public V8 security patch commits, culminating in code execution demonstrated by launching Calculator.
Anthropic said it is working with the EU AI Office and ENISA to improve cyber resilience and acknowledged that advanced AI is a dual-use technology amid European scrutiny of its cyber-capable models.
European lawmakers criticized Anthropic after the company sent technical employee Donny Greenberg instead of its requested head of public policy to a Brussels hearing on risks from advanced AI systems. The hearing examined Anthropic's cyber-capable Mythos and Fable models and their potential impact on critical infrastructure.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
8 references tracked. Mallory keeps watching after this page renders.
foreignaffairs.com
Open sourcescworld.com
Open sourcescworld.com
Open sourcetheregister.com
Open sourcenature.com
Open sourcecybersecuritynews.com
Open sourcescworld.com
Open sourcesemgrep.dev
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Security researchers and AI vendors reported rapid progress in applying frontier models to offensive and defensive cybersecurity work, including the discovery of **`CVE-2025-37899`**, a remote zero-day in the Linux kernel’s SMB implementation. A published account described using an advanced model to help identify the flaw, while OpenAI's **Daybreak** and Anthropic's **Project Glasswing** highlighted broader efforts to build AI systems for cyber operations, vulnerability research, and security workflows. SentinelLABS added evidence that these systems are moving beyond isolated tasks into sustained investigations, describing an eight-stage benchmark based on reverse engineering **fast16**, a 2005 Windows sabotage toolkit tied to interference with high-precision solvers used in nuclear-weapons modeling. In that evaluation, **GPT-5.6 Sol** was reported as the only publicly available model tested that completed the full long-horizon malware-analysis workflow, while other models showed useful point-in-time reasoning but failed to maintain consistency as new evidence forced earlier conclusions to be revised.
Jul 22, 2026
Recent research and evaluations indicate **AI agents are becoming capable of finding and exploiting vulnerabilities with high success rates using standard offensive tooling**, lowering the barrier to semi-autonomous attacks. A study by Irregular in collaboration with **Wiz** reported that leading models (Anthropic *Claude Sonnet 4.5*, OpenAI *GPT-5*, and Google *Gemini 2.5 Pro*) solved **9 of 10** web security CTF challenges modeled on real-world incident patterns, including **authentication bypass**, **exposed secrets**, **stored XSS**, and **SSRF** (including **AWS Instance Metadata Service (IMDS)**-style SSRF). Researchers noted that even when success required multiple stochastic runs, the **low per-run cost (~$2) and limited repeats** could make exploitation practical without necessarily triggering monitoring, with most challenge successes costing **under $1** and multi-run cases totaling roughly **$1–$10**. Separate evaluation results highlighted by Bruce Schneier, citing an Anthropic post, describe *Claude Sonnet 4.5* successfully executing **multistage attacks across simulated networks** using only **standard open-source tools** rather than custom cyber toolkits, including exfiltrating all simulated PII in a high-fidelity **Equifax-breach** simulation by recognizing and exploiting a known **publicized CVE**. In parallel, Dark Reading reported security concerns around the rapid adoption of an open-source autonomous assistant, **OpenClaw** (formerly *MoltBot/ClawdBot*), which can connect to email, files, messaging, and system tools, execute terminal commands and scripts, and maintain memory across sessions—creating **persistent non-human identities and access paths** that may fall outside traditional **IAM** and secrets controls, increasing enterprise risk as “bring-your-own-AI” agents gain privileged access.
Jun 29, 2026
European and national cyber authorities are warning that AI is rapidly increasing the speed and scale of vulnerability discovery and exploit development, raising the prospect of a sustained remediation crisis. The European Central Bank told about 110 major banks to assess AI-enabled cyber threats and submit action plans by **October 31, 2026**, while the European Systemic Risk Board and European Supervisory Authorities issued parallel warnings on systemic risk from frontier AI models. In France, ANSSI Director General Vincent Strubel told senators that AI-assisted discovery could create a multi-year **"patch wall"**, overwhelming remediation teams even as basic controls such as network segmentation, identity and access management, and timely patching remain the most effective defenses. Industry reporting and vendor disclosures show why regulators are escalating. Mozilla said frontier AI models helped identify **271 vulnerabilities** fixed in Firefox 150 after an earlier run found 22 security-sensitive bugs, while researchers and commentators say LLM-assisted patch diffing can shrink the path from a disclosed `CVE` to a working proof of concept to days or even hours, including for flaws such as `CVE-2025-32433` in Erlang/OTP SSH. At the same time, access controls around advanced cyber-capable models are tightening unevenly: Anthropic expanded its restricted **Project Glasswing** program for Claude Mythos to critical-infrastructure organizations, but open-weight alternatives such as Zhipu AI's **GLM-5.2** are reported to deliver competitive vulnerability-finding performance at lower cost, reinforcing concerns that powerful offensive-relevant capability is spreading faster than most enterprises can patch.
Jul 10, 2026