Kevin BeaumontGossiTheDog@cyberplace.social
Oct 25, 2026, 10:18 AMIf anybody reads this OpenAI post and thinks AI found a zero day - no. This one was patched months ago, not found by OpenAI, and reported by an old-school fuzzer.
Replies
- Kevin BeaumontGossiTheDog@cyberplace.socialOct 25, 2026, 10:21 AM
One of the challenges now is that anytime something bad happens in the tech world AI companies are incentivised to claim they did it. As their currency is publicity and relevance, not details.
It doesn’t help that it’s a zero-consequence environment. If somebody did a NotPetya and wiped 10k PCs, it wouldn’t surprise me if people discuss saying Claude did it - as there’s currently no downsides, it just makes you look powerful to C level execs.
Oct 25, 2026, 10:42 AM@GossiTheDog > One of the challenges now is that anytime something bad happens in the tech world AI companies are incentivised to claim they did it.
I think it is therefore logically to conclude that AI companies are (becoming) terror organizations.
fedops 💙💛fedops@fosstodon.orgOct 25, 2026, 11:48 AM@GossiTheDog so "ai" actors are the new state actors. Nobody expects you to be able to defend against them. Get out of jail free card for negligent IT security orgs.
Samirthesdev@vivaldi.netOct 25, 2026, 1:12 PM@GossiTheDog > One of the challenges now is that anytime something bad happens in the tech world AI companies are incentivised to claim they did it.
Reminds me of IS.
NfoonfNfoonf@chaos.socialOct 25, 2026, 2:59 PM@GossiTheDog @tante i wonder when they actually start bragging about killing people.
petur 😶🇺🇦🇵🇸🇹🇼peturdainn@mastodon.socialOct 25, 2026, 10:21 AM@GossiTheDog the post mentioned it was fixed already, do you mean it was also known to be an RCE at the time?
- Kevin BeaumontGossiTheDog@cyberplace.socialOct 25, 2026, 10:23 AM
@peturdainn nah, nobody issued a CVE is an issue
Mortendrgroftehauge@sigmoid.socialOct 25, 2026, 11:26 AM@GossiTheDog @peturdainn So this could have been found by reading the release notes and installing an old version?
Leela TorresLeelaTorres@ieji.deOct 25, 2026, 12:21 PM
Agaxagaxprex@mastodon.socialOct 25, 2026, 12:59 PM@GossiTheDog Hopefully this devolves to a boy who cried wolf situation where they keep flagging exploits that have already been found, patched, or addressed, and the effect on publicity wears off.
LappenjammerLappenjammerDieZweite@vivaldi.netOct 25, 2026, 1:16 PM@GossiTheDog Not the point, but TIL about Brotli and Zopfli in IT.