hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪hrbrmstr@mastodon.social
Oct 13, 2026, 8:17 PM1,415 Microsoft CVEs
One-thousand, four-hundred, and fifteen Microsoft CVEs.
O_O
Replies
- hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪hrbrmstr@mastodon.socialOct 13, 2026, 8:19 PM
pretty sure this breaks Rapid7's ingestion system
- hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪hrbrmstr@mastodon.socialOct 14, 2026, 5:33 AM
woke up abruptly with this on my mind: OM*G they absolutely used copilot or some other agent to write the fixes for all these CVEs.
I'm not one of the performative outragers, but I do read All The Things every day, and there are enough legit well-done studies to show that none of these AI-based "go fix this vuln" systems work as well as advertised.
The patches for a sizeable chunk of these CVEs are gonna have their own CVEs in short order.
Steve SyfuhsSteveSyfuhs@hachyderm.ioOct 13, 2026, 10:24 PM@hrbrmstr you ain't seen nothing yet.
Kevin BeaumontGossiTheDog@cyberplace.socialOct 14, 2026, 12:00 AM- Steve SyfuhsSteveSyfuhs@hachyderm.ioOct 14, 2026, 12:28 AM
@GossiTheDog @hrbrmstr unfortunately they all overflow after 10 and do an RCE
James Forshaw :donor:tiraniddo@infosec.exchangeOct 14, 2026, 7:41 AM@SteveSyfuhs @GossiTheDog @hrbrmstr what I find amazing is that the majority still seem to be memory safety issues. Out of a sample of 20 of the total, not going to check all of them so I could be wrong :)
- Steve SyfuhsSteveSyfuhs@hachyderm.ioOct 14, 2026, 9:10 PM
@tiraniddo @GossiTheDog @hrbrmstr There absolutely is a pattern you're seeing. What we're observing is the agents are good at finding superficial issues and then backtracking to a POC. They aren't figuring out big picture or the existential stuff. Yet.
- Steve SyfuhsSteveSyfuhs@hachyderm.ioOct 14, 2026, 9:12 PM
@tiraniddo @GossiTheDog @hrbrmstr the fact that it's the same godsdamned memory safety issue in a million places is really just rude.
John Jarockijarocki@infosec.exchangeOct 14, 2026, 8:42 PM@hrbrmstr well, today I heard about someone who was let go due to not “using AI enough.”
Create perverse incentives. Get perverse results. :-/
- hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪hrbrmstr@mastodon.socialOct 14, 2026, 8:58 PM
@jarocki O_O
