> We've developed an autonomous vulnerability discovery, exploitation, and patching pipeline. In one run with our cyber model, it validated and generated patches for 948 local privilege escalation vulnerabilities in Linux at an API cost of $1.2 million.

Imagine if open-source organizations other than the Linux Foundation (and Mozilla I guess) could throw $1.2M of API-rate LLM usage at security.

Tbh I feel less safe in digital world after reading this article. Would be cool to see "And then we made a formal proof that there's no more vulnerabilities" someday

> For the near and medium term, having access to a low-privileged account on an operating system, that isn’t up-to-date on its latest available patches should be considered functionally equivalent to root access for a well-resourced threat actor.

*buries head in sand*

*cries*

I wonder what Sidero Labs has to say about this article. My hopes are pegged on their efforts. I have my wagon ready to hitch on their horses. They are not a one pony show anymore guys, Talos OS can be standalone server OS, a hypervisor server or cluster, and their flagship of k8s node or cluster. We get all that in an immutable gitops ready OS. I'm practically sold on their offering.

    While we were developing the pipeline, in late July 2026, GPT‑5.6 Sol found and exploited 166 unique LPE vulnerabilities for an end-to-end $513,690 cost in API credits.

    In the second scan, in mid-October 2026, the newer cyber model found and exploited 948 unique LPE vulnerabilities for an end-to-end $1,213,430 cost in API credits. For both campaigns, we scanned the latest Linux kernel master branch at the time.

boy I really wonder though, how many of these 948 LPE are nearly impossible to execute though.

I love how we're finally putting numbers to our technical debt.

Curious question - if any organization sponsored a 1.2mn USD program to find vulnerabilities in Linux, will they find these many vulnerabilities? Or use a professional software like Checkmarx or Veracode to do it with 1.2mn USD in license + human effort.

Is it a funding + will problem or is it an AI problem?

I wonder if they could run it on OpenBSD and FreeBSD as well.

Crazy times. These corporations and their governments have access to literal zero-day vending machines. Put $50 in - get another one. I mean, yeah, it was clear that certain agencies had heaps of useful exploits at hand for quite some time now. But AI really commoditizes these exploits. If there's source code or even just a binary available, they can hack it. And even if your code is robust and secure, they just pull the lever on the vending machine again and come back with some zero-day for your OS's networking stack.