As cited
Copy frozen at (site build).
vulnerabilities
Imagine there's no Shiny Hunters – AI could make human hacking crews obsolete
The FBI has announced a third arrest related to the Shiny Hunters group's breach of Bureau systems, joining two earlier arrests in different countries as law enforcement pursues members of the English-speaking extortion crew. Separately, Anthropic's Mythos artificial intelligence (AI) model discovered a second vulnerability in the wild that would have been difficult for human researchers to find: a critical authentication bypass in Rejetto HTTP file server that exploited a weak pseudorandom number generator, which was exploited within a day of public disclosure. Anthropic has restructured its security partnership programs to expand access to AI-enabled vulnerability detection tools for defenders, while the company maintains that defenders may gain an advantage within two years as AI capabilities mature.
Why it matters: Organizations targeted by Shiny Hunters face ongoing extortion risk from a highly capable, decentralized group; defenders using AI tools now face the reality that attackers have equivalent access to the same models for finding zero-day vulnerabilities, creating a new asymmetry in the attacker-defender balance.
- Source published
- First seen by Cybersecurity Tracker