API
< Back to situations

Monitor this situation.

[SITUATION] · [ACTIVE] · [TECHNOLOGY]

2 clusters · 20 sources · 6 days · First seen · Last updated

AI-driven autonomous cybersecurity research

Overview

Researchers and developers are demonstrating the increasing capability of large language models to autonomously identify and exploit software vulnerabilities.

In late October 2026, Epoch AI researchers showed that the GLM 5.3 model could independently exploit the “patch gap” in Firefox. The model developed file-stealing attacks against specific releases, simulating a low-resource attacker by working from basic instructions to identify vulnerabilities and build exploits.

By early November 2026, OpenAI reported the development of an autonomous pipeline using an unreleased model to analyze the Linux kernel. This multi-agent system identified thousands of candidate findings and validated 948 local privilege escalation vulnerabilities. The system also developed undocumented exploitation techniques and generated candidate patches. Additionally, OpenAI reported that its GPT-6 Cyber model identified 81 high-severity vulnerabilities in Mozilla Firefox, which are currently being addressed by Mozilla.

Entities

Mozilla · Debian Project · GLM 5.3 · OpenAI · GPT-6 Cyber

Claims

What the coverage asserts, and how many sources carry each claim.

Timeline

  1. [TECHNOLOGY] 18 sources
    OpenAI develops autonomous AI pipeline to find and patch Linux vulnerabilities

    OpenAI's new autonomous AI pipeline identified 948 Linux kernel vulnerabilities and 81 Firefox flaws, demonstrating the potential for AI to automate large-scale vulnerability discovery and patch generation.

  2. [TECHNOLOGY] 2 sources
    Epoch AI researchers demonstrate AI-driven Firefox exploits

    Epoch AI researchers found that the GLM 5.3 AI model can autonomously exploit the “patch gap” to create file-stealing attacks against Firefox, costing roughly $1,000 per exploit.

Sources

associationsnow.com · clubic.com · computerbase.de · cryptobriefing.com · cybernoz.com · dev.to · extremehousewife.com · gigazine.net · hackernoon.com · interestingengineering.com · it-boltwise.de · itnews.com.au · newsmobile.in · smartechdaily.com · t3n.de · techcrunch.com · techgenyz.com · technice.com.tw · the-decoder.de · theregister.com