Post

I know there's been debate since the emergence of Mythos over what these cyber capable models will mean for the internet in practice. Some said from the beginning that a 'vulnpocalypse' was upon us; others were more skeptical. Six months on from the release of Mythos, has anyone switched sides?

I think there’s a misunderstanding among a lot of people of volume of discovered vulnerabilities versus reliably exploitable vulnerabilities versus actually actively exploited vulnerabilities. We’ve definitely seen more vulns and patches, but not the increase in actively exploited in line with that.

I think this is the exact report I read a while back “Of 1,061 vulnerabilities attributed to AI-assisted discovery, only 14, or 1.3%, have been confirmed as exploited in the wild”