OpenAI 称其安全研究团队用一套自主漏洞发现、利用与修补流水线，在一次运行中为 Linux 内核 948 个本地提权漏洞验证并生成补丁，总 API 成本 120 万美元。
同一件事，精选收录的是《OpenAI 构建自主流水线，在 Linux 内核中发现并修复 948 个本地提权漏洞》
OpenAI claims their new security model patched 948 Linux privilege escalation vulnerabilities.
Scout agents cut the kernel’s 40M-plus lines to 2.8M worth auditing.
i.e. AI agents picked the most security-relevant 7% of the Linux kernel (2.8M lines), flagged 2,308 suspected bugs, confirmed 1,724 in test machines, and built working root-takeover exploits and fixes for 948. Humans reviewed the results before sending them to Linux maintainers.
The whole run cost $1,213,430 in API credits, $775,929 of it on building exploits, though OpenAI ran its own model, so that’s likely not cash actually spent.
So all this means that finding and weaponizing a Linux kernel bug now costs about $1,279 with AI, so any unpatched Linux machine where an attacker gets even a basic user account should be treated as fully taken over.
Our security researchers built an autonomous cyber vulnerability discovery, exploitation, and patching pipeline. In a single run with an upcoming cyber model, it validated and generated patches for 948 local privilege escalation vulnerabilities in the Linux kernel at a total API cost of $1.2 million.在 X 查看被引用的帖子
来源：Rohan Paul · x.com