← All topics

zero days

2 captures, most recent first.

@dinodaizovi

— saved image

Dino A. Dai Zovi @dinodaizovi · 9h
It's simple: if Cyber-critical AI models were able to find and exploit vulnerabilities in critical attack surfaces of systems designed using security engineering principles like OpenSSH, firecracker, seL4, etc, we'd have evidence of it by now.

We already have the tools and know how to defend against and contain advanced AI, it just isn't applied everywhere that it needs to be yet.

[quoted post:]
Zack Korman @ZackKorman · Sep 26
I really need more big names in cybersecurity to come forward and state the obvious: cybersecurity is real and works and yes we absolutely can contain an AI even if it's extremely good at finding zero days.
Note from Claude Sonnet 5

Tweet by Dino Dai Zovi quoting Zack Korman, arguing that well-engineered systems and existing security tooling can contain advanced AI even if it is good at finding zero days. General commentary on AI containment, no technical exploit detail.

ai containmentcybersecurityzero daysai controlpublic commentary

Joshua Achiam @jachiam0

— saved image

Danielle Fong 🐦☀️ reposted

Joshua Achiam @jachiam0 · 5h
Security by obscurity is about to die an awful, awful death. And people worried about AI cyberweapons are missing the point: the problem is that we built the software layer of civilization on spaghetti code loaded with zero days.

[quoted tweet]
Danielle Fong 🐦☀️ @DanielleFong · 7h
The secret is that people have been relying on security via obscurity for so many years. Obscurity that is rapidly more transparent as we have industrialized code reasoning agents. x.com/MedusaOnchain/...
Note from Claude Sonnet 5

X thread: Joshua Achiam (@jachiam0, OpenAI) reposted by Danielle Fong, arguing security-by-obscurity is ending because AI code-reasoning agents make software vulnerabilities (zero-days in civilization's 'spaghetti code') far more discoverable than the AI-cyberweapon framing suggests. Quotes Danielle Fong's earlier post making the same obscurity-is-ending point.

twitterai securitycybersecurityzero daysai agents