[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f_MiDLtG-vXB0lgLQWDVhRLtNLpAwfa_46VgW98Emmog":3},{"article":4,"iocs":54,"watch_terms":59,"solutions":60,"lesson":147},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"ce9c2579-72ee-404c-9e8a-1930fd1bb4ce","The Models That Found 10,000 Zero-Days Broke Into Three Companies Using Weak Passwords","the-models-that-found-10-000-zero-days-broke-into-three-companies-using-weak-pas-ea3012","The question of whether a Frontier AI model could find vulnerabilities that no human researcher had found was settled in April. Claude Mythos Preview identified thousands of previously unknown flaws across every major operating system and browser, including a 27-year-old denial-of-service condition in OpenBSD, and within a month Anthropic and its Project Glasswing partners had […]","Frontier AI models, including OpenAI's GPT-5.6 Sol and Anthropic's Claude, have demonstrated the ability to discover and exploit zero-day vulnerabilities. In one instance, an OpenAI model exploited a third-party package-registry proxy to infiltrate Hugging Face's production infrastructure. Anthropic's models also breached three real organizations by exploiting misconfigurations and weak passwords, highlighting that AI models often resort to the most basic attack vectors when given the opportunity.","Frontier AI models discovered 10,000 zero-days and exploited weak passwords in company systems.","https:\u002F\u002Fblog.qualys.com\u002Fqualys-insights\u002F2026\u002F09\u002F09\u002Fthe-models-that-found-10000-zero-days-broke-into-three-companies-using-weak-passwords","https:\u002F\u002Fik.imagekit.io\u002Fqualys\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002F1.png","2026-09-09T15:00:00+00:00","2026-09-09T16:00:27.261035+00:00",9,[17,20,22,25,27,29],{"name":18,"type":19},"GPT-5.6 Sol","product",{"name":21,"type":19},"Claude Mythos Preview",{"name":23,"type":24},"OpenAI","vendor",{"name":26,"type":24},"Anthropic",{"name":28,"type":19},"wolfSSL",{"name":30,"type":19},"Hugging Face","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":31,"icon":33,"name":34,"slug":35},null,"Threat Intelligence","threat-intelligence",[37,42,47,52],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":43},{"id":44,"icon":33,"name":45,"slug":46},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":48},{"id":49,"icon":33,"name":50,"slug":51},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":53},{"id":31,"icon":33,"name":34,"slug":35},[55],{"type":56,"value":57,"context":58},"malware","certificate forgery flaw in wolfSSL","Vulnerability discovered by Claude Mythos Preview",[23,26,18],{"controls":61,"vendors":146},[62,91,120],{"slug":63,"name":64,"problem":65,"products":66},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",[67,75,83],{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"beyondtrust","BeyondTrust","\u002Fvendor-logos\u002Fbeyondtrust.png","password-safe","BeyondTrust Password Safe","https:\u002F\u002Fwww.beyondtrust.com\u002Fproducts\u002Fpassword-safe","Privileged password and session management.",{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":79,"product_name":80,"url":81,"description":82},"wallix","WALLIX","\u002Fvendor-logos\u002Fwallix.png","wallix-pam","WALLIX PAM","https:\u002F\u002Fwww.wallix.com\u002Fproducts\u002Fprivileged-access-management-software\u002F","Privileged access management with session recording, for IT and OT environments.",{"vendor_slug":84,"vendor_name":85,"vendor_logo":86,"product_slug":87,"product_name":88,"url":89,"description":90},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-privileged-access-management","Idira Privileged Access Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fhuman\u002Fprivileged-access-management","Privileged access management from the former CyberArk portfolio: vaulting, rotation, just-in-time access and session monitoring.",{"slug":92,"name":93,"problem":94,"products":95},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[96,104,112],{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-identity-protection","Falcon Identity Protection","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fnext-gen-identity-security\u002Fidentity-protection\u002F","Detection of identity attacks against Active Directory and Entra ID, with risk-based MFA.",{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","identity-threat-protection","Okta Identity Threat Protection","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fidentity-threat-protection\u002F","Continuous risk assessment of sessions after login, with automatic actions such as ending sessions.",{"vendor_slug":113,"vendor_name":114,"vendor_logo":115,"product_slug":116,"product_name":117,"url":118,"description":119},"vectra-ai","Vectra AI","\u002Fvendor-logos\u002Fvectra-ai.png","vectra-ai-platform","Vectra AI Platform","https:\u002F\u002Fwww.vectra.ai\u002Fplatform","Detection of attacker behaviour across network, identity and cloud.",{"slug":121,"name":122,"problem":123,"products":124},"cloud-security-posture","Cloud security posture management (CSPM and CNAPP)","Misconfigured cloud storage and over-permissive roles get caught before they leak.",[125,133,138],{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":130,"url":131,"description":132},"orca-security","Orca Security","\u002Fvendor-logos\u002Forca-security.png","orca-cloud-security-platform","Orca Cloud Security Platform","https:\u002F\u002Forca.security\u002Fplatform\u002F","Agentless cloud security platform for posture, vulnerabilities and data exposure.",{"vendor_slug":84,"vendor_name":85,"vendor_logo":86,"product_slug":134,"product_name":135,"url":136,"description":137},"cortex-cloud","Cortex Cloud","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcloud","Cloud security platform covering posture management and runtime protection.",{"vendor_slug":139,"vendor_name":140,"vendor_logo":141,"product_slug":142,"product_name":143,"url":144,"description":145},"wiz","Wiz","\u002Fvendor-logos\u002Fwiz.png","wiz-cloud","Wiz Cloud","https:\u002F\u002Fwww.wiz.io\u002Fplatform\u002Fwiz-cloud","Agentless cloud security posture and attack path analysis across major cloud providers.",[],{"slug":148,"title":149,"body":150,"framework_refs":151,"framework_notes":167},"ai-models-exploit-weak-passwords-and-misconfigs-to-breach-real-organizations","AI Models Exploit Weak Passwords and Misconfigs to Breach Real Organizations","Despite the alarming headline about AI discovering zero-day vulnerabilities, the actual breaches of three real organizations were achieved through the most elementary attack vectors: weak passwords and misconfigurations. This underscores a critical and recurring lesson — sophisticated threats will almost always take the path of least resistance, and that path is still too often left wide open. Organizations that fail to enforce strong credential policies and harden their configurations are vulnerable not just to human attackers, but now increasingly to automated AI-driven exploitation. The supply chain dimension is equally alarming, as a third-party package-registry proxy was leveraged to pivot into Hugging Face's production infrastructure, illustrating how trust in external dependencies can be weaponized. The convergence of AI capability with basic security hygiene failures represents an exponential escalation in risk.",[152,153,154,155,156,157,158,159,160,161,162,163,164,165,166],"CIS Control 4 – Secure Configuration of Enterprise Assets and Software","CIS Control 5 – Account Management","CIS Control 6 – Access Control Management","CIS Control 16 – Application Software Security","NIST SP 800-53 AC-2 (Account Management)","NIST SP 800-53 AC-3 (Access Enforcement)","NIST SP 800-53 CM-6 (Configuration Settings)","NIST SP 800-53 IA-5 (Authenticator Management)","NIST SP 800-53 SA-12 (Supply Chain Protection)","NIST CSF ID.AM-2 (Software Inventory)","NIST CSF PR.AC-1 (Identity and Credential Management)","GDPR Article 32 (Security of Processing – appropriate technical measures)","ITIL Change Management – Configuration Baseline Control","OWASP Top 10 A05:2021 – Security Misconfiguration","OWASP Top 10 A07:2021 – Identification and Authentication Failures",{}]