Essay says AI shrank PHP2Shell exploit time to hours
The author says CVE-2026-109618 and CVE-2026-109619 were exploited before the delayed patch, after leaks broke the embargo.
Stories per day · 30 days
2 RSS
6 stories, newest first · one card per story
Stories tagged #exploit-development
Update encoder and exploit templates to enforce fail-loud architectur…
Rapid7 updated Metasploit encoder and exploit templates to fail loudly and standardize rank placeholders.
$536 and 8 Hours: AI Learns to Attack a Different PLC
Forescout used Claude to port a WAGO PLC exploit for $536 in 8 hours, and an AI-generated payload later permanently bricked the test device.
Just a rumour of a bug is enough to find a security exploit these days
Commentary argues that an unverified rumor of a software bug is now enough for researchers or attackers to develop a working exploit.
Why The Vulnerability Backlog Is About To Get Worse
Recorded Future analysis says AI-driven vulnerability discovery and faster weaponization will grow the triage backlog while shrinking defenders' response windows.
3
OpenAI Launches GPT-5.6-Cyber with Reduced Safeguards for Exploit Development
OpenAI released GPT-5.6-Cyber for vulnerability research and pentesting via Daybreak Red, completing 95% of advanced cyber task evaluations.
2