• irmadlad@lemmy.world
    link
    fedilink
    English
    arrow-up
    54
    arrow-down
    1
    ·
    13 hours ago

    A separate vulnerability in Linux allows users with limited rights to escalate to root. Tracked as CVE-2026-43499, it lurked in the OS for 15 years. Researchers from Nebula Security said they discovered it using Vega, Nebula’s AI-assisted vulnerability scanner. Matt Lucas, a researcher and founder of RedEye Security, explained

    This will become more and more common as we use AI to find vulnerabilities faster (hopefully) than bad actors can use AI to find vulnerabilities.

        • Reannlegge@lemmy.ca
          link
          fedilink
          English
          arrow-up
          5
          ·
          4 hours ago

          If they leave it out someone else will find it, the days of leaving things out deliberately past.

      • mlg@lemmy.world
        link
        fedilink
        English
        arrow-up
        13
        ·
        edit-2
        4 hours ago

        20 years of hoarding CVEs down the drain.

        Now they’ll never be able to gg ez their way into any country and will have to actually use their bribery budget to get more implants lol.

        • sp3ctr4l@lemmy.dbzer0.com
          link
          fedilink
          English
          arrow-up
          8
          arrow-down
          1
          ·
          6 hours ago

          Which means the new paradigm will be ‘every piece of hardware is a supply chain attack.’

          cough TPM 2 cough

    • lambalicious@lemmy.sdf.org
      link
      fedilink
      English
      arrow-up
      6
      arrow-down
      18
      ·
      9 hours ago

      as we use AI to find vulnerabilities faster (hopefully) than bad actors can use AI to find vulnerabilities.

      Oh small, simple child: who do you think has the better access to AI in the first place?

      • Fedizen@lemmy.world
        link
        fedilink
        English
        arrow-up
        15
        ·
        7 hours ago

        This is a reminder that US scientists during the cold war thought fish were russian subs because they didn’t have biologists on staff

        Judging by the way they’ve treated big companies in the past the NSA is staffed by a bunch of people who use backroom deals with US tech companies to collect their data mostly.

        I actually think a large plurality of them spend most their time tracking/stalking their wives and like people they argued with the day before.

      • pienz@feddit.org
        link
        fedilink
        English
        arrow-up
        4
        ·
        9 hours ago

        The companies who are training AI… On Linux servers?

        Wait no, obviously smaller actors you’re referring to with your mysterious comment.

        Or maybe all the follow on tech companies that are the largest customers using AI aaand who also mostly use Linux

        No no I’ve got it wrong, US government entities want a backdoor so restrict AI releasing, then during that window exploit non-US companies using Linux

      • irmadlad@lemmy.world
        link
        fedilink
        English
        arrow-up
        3
        arrow-down
        2
        ·
        7 hours ago

        small, simple child:

        Didn’t downvote you but…

        LOL! The level condescension sure is right on point Lemmy.That genuinely got a chuckle. In some ways I enjoy being that simple child. Full of wonderment at this universe around him.