Post

Zero-days are not really zero-days. First of all, no APT or script kiddy develop exploits for vulnerabilities that hasn’t been published. During the PHP2Shell incident, nobody was able to do a workable exploit using AI or otherwise faster than you could patch. #security

Most exploits published where all untested, non-working, AI slope. The few working exploits were from highly skilled individuals and they only worked on a sub-set of PHP configurations under very specific conditions. As long as you auto-patch when the he patch comes out, you are safe.

No reason to get up at night or worry about Mythos. Mythos is mythos and it’s still business as usual as far as patching is concerned, and ai makes no difference. It still takes real skills to develop workable malware.