PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Mythos Doesn't Deploy Itself

bishopfox.com | blog | #ai-security | #bug-bounty | #vulnerability-research | #llm | #essay | #openbsd
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Vinnie Liu argues AI amplifies capable researchers and junk output alike — bug bounty programs are collapsing under AI submissions — and cites Provos' OpenBSD work to show harness and expert decide.
Published
Collected

Related coverage

blog · hackenproof.com
How We Built an Autonomous AI Security Triager: From LLM to 20,000+ Real Reports
AI made bug hunters sharper, and report volume doubled. How HackenProof built an autonomous AI triager that now handles 70% of submissions.
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
research · projectdiscovery.io
PHP2Shell: finding and patching affected PHP
Two CVSS 9.2 bugs in the PHP runtime allow unauthenticated code execution; the patch is a package upgrade and a restart, and this guide shows how to find every PHP runtime you need to patch.
research · vercel.com
DeepsecBench: evaluating model performance in finding cybersecurity vulnerabilities
Today we're releasing DeepsecBench, a benchmark that evaluates how well different models find security vulnerabilities in application code.
vulnerability · vercel.com
The Vercel OSS Bug Bounty program is now available
Vercel is opening its open source software bug bounty program to the public for researchers find vulnerabilities and make OSS safer
blog · bishopfox.com
The Smash-and-Grab Era
Bishop Fox's CEO traces three eras of cyberattack — patient low-and-slow espionage, loud ransomware, and now LLM-driven smash-and-grab — warning parallel attacks break detect-and-respond models.
Back