-

2026-10-25 03:18:27

GossiTheDog@cyberplace.social

If anybody reads this OpenAI post and thinks AI found a zero day - no. This one was patched months ago, not found by OpenAI, and reported by an old-school fuzzer.

2026-10-25 03:21:38

Kevin Beaumont

GossiTheDog@cyberplace.social

One of the challenges now is that anytime something bad happens in the tech world AI companies are incentivised to claim they did it. As their currency is publicity and relevance, not details.

It doesn’t help that it’s a zero-consequence environment. If somebody did a NotPetya and wiped 10k PCs, it wouldn’t surprise me if people discuss saying Claude did it - as there’s currently no downsides, it just makes you look powerful to C level execs.

2026-10-25 03:21:46

petur 😶🇺🇦🇵🇸🇹🇼

peturdainn@mastodon.social

@GossiTheDog the post mentioned it was fixed already, do you mean it was also known to be an RCE at the time?

2026-10-25 03:33:23

Sharkfie :100_gay:

sharkfie@infosec.exchange

@GossiTheDog AI company tries to not claim credit for something challenge. Haven't heard "well our model actually committed cybercrimes too we just weren't aware" in a few weeks

If they "knew" about it being a possible RCE (much like SAST pointing out thousands of findings) they wouldn't wait this long

2026-10-25 04:06:28

Métapsyché

metapsyche@infosec.exchange

@GossiTheDog

👍

2026-10-25 04:39:36

Netzblockierer

Netzblockierer@tech.lgbt

@GossiTheDog OFC.