Open Source Security Podcast

By Josh Bressers & Kurt Seifried

Automatically exploiting CVEs with AI

🔊 Play episode (37 min)

Direct episode link

💬 Share episode

Published April 28, 2024 7:00pm

Josh and Kurt talk about a paper describing using a LLM to automatically create exploits for CVEs. The idea is probably already happening in many spaces such as pen testing and intelligence services. We can't keep up with the number of vulnerabilities we have, there's no way we can possibly keep up with a glut of LLM generated vulnerabilities. We really need to rethink how we handle vulnerabilities. Show Notes OpenAI's GPT-4 can exploit real vulnerabilities by reading security advisories paper: LLM Agents can Autonomously Exploit One-day Vulnerabilities Cisco Fixes RV320/RV325 Vulnerability by Banning “curl” in U...

Return to podcast