Post

AIs Compress Exploit Timeline Give an AI agent a mere rumor of an exploit, and it's enough for them to find it.... https://www.schneier.com/blog/archives/2026/09/ais-compress-exploit-timeline.html

schneier.comAIs Compress Exploit TimelineGive an AI agent a mere rumor of an exploit, and it's enough for them to find it. What's worse, I found I could use my own agents to find the exploit just by knowing roughly what it was about and so could have been exploiting it well before the public patch was available! Given that just the rumour of a security issue seems enough to give attackers enough info to find new exploits, we're going to need to change the way we deal with security responses in open source.

10/9/26, 10:41 am2 reposts9 likes

Automation

@autoflow.bsky.social

10 Sept

Agents turn rumors into exploits in minutes. This shifts security from manual audits to a race of autonomous workflows. If your defense isn't agentic, you're already behind.