Post

I know there's been debate since the emergence of Mythos over what these cyber capable models will mean for the internet in practice. Some said from the beginning that a 'vulnpocalypse' was upon us; others were more skeptical. Six months on from the release of Mythos, has anyone switched sides?

21/10/26, 8:48 pm0 reposts4 likes

—>realhackhistory.org

@bsky.realhackhistory.org

I think there’s a misunderstanding among a lot of people of volume of discovered vulnerabilities versus reliably exploitable vulnerabilities versus actually actively exploited vulnerabilities. We’ve definitely seen more vulns and patches, but not the increase in actively exploited in line with that.

Raphael Satter

@raphae.li

www.vulncheck.com/blog/state-o... I feel like @vulncheck.bsky.social had good stats on this recently.

vulncheck.comVulnCheck State of Exploitation 1H-2026 | Blog | VulnCheckKey Trends and Findings from Known Exploited Vulnerabilities, AI discovered vulnerabilities, and AI targeted technologies from the first half of 2026

—>realhackhistory.org

@bsky.realhackhistory.org

I think this is the exact report I read a while back “Of 1,061 vulnerabilities attributed to AI-assisted discovery, only 14, or 1.3%, have been confirmed as exploited in the wild”

—>realhackhistory.org

@bsky.realhackhistory.org

Interesting analysis here infosec.exchange/@mayahustle/...

infosec.exchangeJimmy Wylie (@mayahustle@infosec.exchange)Framing the php2shell story as "AI uncovered php2shell" is like hearing an awesome song and crediting the guitar instead of the player. It's just incorrect and steals credit from a good researcher. T...