Fuzzing+Large language model → AI vulnerability discovery

The Big Sleep agent (Google Project Zero and Google DeepMind) finds an exploitable memory-safety bug in SQLite; according to Google, the first public example of such a find by an AI agent in widely used software — projectzero.google ↗

Cybersecurity · Software development

⚑ Backed by

• Cybersecurity / Sean Heelan: “We should start assuming that in the near future the limiting factor on a state or group’s ability to develop exploits, break into networks, escalate privileges and remain in those networks, is going to be their token throughput over time, and not the number of hackers they employ.”
• Software development / Greg Kroah-Hartman: “Months ago, we were getting what we called 'AI slop,' … Something happened a month ago, and the world switched. Now we have real reports. … All open source projects have real reports that are made with AI, but they're good, and they're real.”

¶ cvs58risf