Technology

2663 readers

65 users here now

Tech related news and discussion. Link to anything, it doesn't need to be a news article.

Let's keep the politics and business side of things to a minimum.

Rules

No memes

founded 1 year ago

MODERATORS

rimu@piefed.social

AI-found bugs aren't proving any easier to exploit despite the hype (www.theregister.com)

submitted 6 hours ago by rimu@piefed.social to c/technology@piefed.social

5 comments fedilink hide all child comments

VulnCheck says fewer than 2% of AI-assisted vulnerability discoveries have been weaponized, casting doubt on claims frontier models are handing attackers a major advantage

you are viewing a single comment's thread
view the rest of the comments

[–] Canconda@lemmy.ca 2 points 6 hours ago* (last edited 6 hours ago) (1 children)

AI discovering new zero-days isn't the real issue though.

AI's ability to seamlessly implement every single known vulnerability is the problem that can attack us at scale.

An AI trained on devices, software versions, and vulnerabilities could literally identify targets just by the hardware. It would passively identify and attack anything with out of date security software.

It's inevitable and we won't know it exists until one day some crazy number of the network routers in the world all stop working more or less at the same time.

[–] rimu@piefed.social 2 points 6 hours ago (1 children)

That sounds plausible but is in direct contradiction to the contents of the article.

[–] Canconda@lemmy.ca 3 points 6 hours ago

They're talking about AI discovering vulnerabilities. I'm talking about already known vulnerabilities. Example, a device that hasn't been updated since 2018.

analyzed 1,061 publicly attributed AI-assisted vulnerability discoveries from Anthropic's Project Glasswing and the Berkeley Vulnerability Research Initiative, then cross-referenced them against its Known Exploited Vulnerability (KEV) database.