ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “exploit-development”

4 items

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllModel release 3Threat actor 2Research 1Vulnerability 1
SeverityAllcritical 1high 2medium 0low 0info 4

Claude Mythos Executes End-to-End Intrusion From Initial Access to Full Domain Compromise

Anthropic's Claude Mythos Preview, its most cyber-capable model, autonomously completed an end-to-end enterprise intrusion simulation in restricted-access testing.

Anthropic's April 2026 system card describes Claude Mythos Preview as the first model to solve a private cyber range end to end and finish a corporate-network attack simulation an expert would need 10+ hours to complete. It scored 100% pass@1 on a 35-challenge Cybench subset and 0.83 on CyberGym versus 0.67 for Claude Opus 4.6. The model is limited to vetted partners under Project Glasswing; it failed an OT cyber range and could not find novel exploits in a fully patched sandbox.

GBHackers · 8d agoModel release1

OpenAI launches GPT-6 Astra, its first model to cross a critical cybersecurity threshold

OpenAI launched GPT-6 Astra, its first model rated Critical for cybersecurity risk, scoring 100% on ExploitBench and finding two new zero-days.

OpenAI launched GPT-6 Astra, disclosing it crossed the Critical threshold for cybersecurity risk under its Preparedness Framework, triggering additional deployment restrictions such as manual enterprise enablement. The model scored 100% on ExploitBench (vs 78.5% for predecessor GPT-5.6 Sol) and 42.4% on ExploitGym (vs 30.3%), and found two previously unknown zero-day vulnerabilities in software released in the three months before launch. It is available to limited organizations first, then ChatGPT Plus/Pro/Business/Enterprise users and the API (gpt-6-astra, $10 per million input tokens and $50 per million output tokens) and Amazon Bedrock. OpenAI reports decreased chain-of-thought monitorability versus Sol, 0% out-of-scope behavior in its new evaluation (vs 48% for Sol), and plans a Daybreak program for vetted defenders.

CSO Online · 12d agoModel release2

$536 and 8 Hours: AI Learns to Attack a Different PLC

Forescout used Claude to port a WAGO PLC exploit for $536 in 8 hours, and an AI-generated payload later permanently bricked the test device.

Forescout researchers used Claude Code with Ghidra, terminal access, and physical hardware to port CVE-2021-31886, a pre-authentication buffer overflow in the Nucleus FTP server, from a WAGO 750-852 PLC to the WAGO 750-831 without source code or debugger access. The final RCE development stage cost $535.74 in API fees over an 8-hour, 32-minute session (2.6k input and 1.3M output tokens) and required heavy researcher guidance. Claude produced working ICMP and UDP beacon exploits in 12 minutes after identifying that normal FTP command completion was overwriting its shellcode, fixed by omitting the CRLF terminator. A follow-up session extending the payloads toward a C2 implant wrote to flash-mapped memory and permanently bricked the PLC, underscoring the risks of autonomous agents operating against physical infrastructure.

Security Affairs · 13d agoResearchCVE-2021-318861