Post

Zero-days are not really zero-days. First of all, no APT or script kiddy develop exploits for vulnerabilities that hasn’t been published. During the PHP2Shell incident, nobody was able to do a workable exploit using AI or otherwise faster than you could patch. #security

Uncle Joe

@sydseter.com

Most exploits published where all untested, non-working, AI slope. The few working exploits were from highly skilled individuals and they only worked on a sub-set of PHP configurations under very specific conditions. As long as you auto-patch when the he patch comes out, you are safe.

Uncle Joe

@sydseter.com

No reason to get up at night or worry about Mythos. Mythos is mythos and it’s still business as usual as far as patching is concerned, and ai makes no difference. It still takes real skills to develop workable malware.

25/10/26, 9:57 am1 repost4 likes

Uncle Joe

@sydseter.com

If you want to use AI where it really pays off, instead of spending large amount of resources on scanning all your source code using the latest AI models, use it to automatically patch your software. Then wait 24 hours and test it before deployment ofcourse.