Topic
Use of AI coding agents to shorten the time from patch disclosure to working exploit.
Hacktron AI chained a Discourse image-library flaw to a weakness in OpenAI's single sign-on and into the Codex environment in under 72 hours, after swapping Claude Opus 4.8 for Opus 5 to get a working exploit.
Perspective Coverage
4 publishersReality
Hacktron chained a heap overflow in libheif to an OpenAI SSO flaw and opened a pull request in OpenAI's internal monorepo in under 72 hours. The bug had been fixed upstream a year earlier, but the fix never reached Debian's packages.
Reality
The libheif bug was fixed upstream a year earlier without a security label or a CVE, so a Discourse image check that ignored HEIC left it reachable, and forum sign-in tokens carried full API access to the accounts behind them.
Perspective Coverage
6 publishersReality
Proofpoint says at least four China-linked espionage groups fired the same BlueMoon code at different victims during the four weeks a Chromium fix took to reach stable Chrome, and two more groups probably did too.
Perspective Coverage
9 publishersReality
An open-source gateway author walked Hacktron's five-step path into OpenAI through his own seven detection layers. The first two hops are requests to a forum and an identity provider. Where the gateway is deployed decides what any of it can read.
Reality
TeamPCP hijacked developer accounts, poisoned hundreds of programs and released a worm to automate the spread. Google says the inside access let it warn victims, revoke stolen credentials and help patch an AI-developed zero-day.
Reality
Hacktron's path into OpenAI's internal repos ran through a libheif bug Debian had not backported and a single sign-on flow that trusted community.openai.com. The dev.to breakdown says the model changed what the attack cost. The category of attack was the same either way.
Reality
An SC Media Perspectives column reports the run took 51 minutes with one human assist, against a couple of days by hand, and the team had Drupal's pre-announcement to prepare before the clock started.
Reality
Proofpoint says two of the three bugs in the BlueMoon chain were fixed in public Chromium source before they reached stable Chrome. Defenders could close one link: an old Windows build.
Reality
Vedere Labs did get Claude Code to move a working exploit onto a second WAGO controller, and the price of doing it puts a measurable ceiling under the pitch that AI now writes OT exploits at machine speed.
Reality
Forescout's Vedere Labs ported a known WAGO exploit to a new model with Claude and Ghidra, tracking every dollar and human correction. A single bad write to flash memory bricked the target PLC for good.
Reality
A SecurityWeek argument, plus Broadcom's paid-first Spring patch repository, puts a price on knowing what changed in a build. The people diffing binaries were always going to pay it.
Reality
Client fixes shipped in June and July. The exploit route only went public this month, and Zoom scores the bugs well below the firm that found them.
Reality