On Sun, 30 Aug 2026 15:05:55 -0400 "Theodore Tso" <[email protected]> wrote:
> On Fri, Aug 28, 2026 at 07:22:51AM -0500, Henrik Ahlgren wrote: > > > Thank Lucas for the suggestion to use bubblewrap. The list of > > > command-line arguments is a bit intimidating, but I will try to > > > try it. > > > > Unfortunately, even full VMs are not entirely secure: > > > > https://blog.trailofbits.com/2026/08/26/vms-wont-contain-cyber-capable-agents/ > > > > One interesting observation from this blog post is that all of the > exploits found by the AI was patched upstream, but unfortunately not > in the distribution kernel (the OP was using Debian oldstable). > Quoting from the blog: > > A distribution with rapid updates is now a requirement. I love > older, stable software, but the cycle of backporting patches is > simply too long. An older distribution (like Debian 12, my old > standby) that isn’t getting immediate upstream updates should be > assumed vulnerable. A competent agent will discover these bugs > quickly and synthesize target-specific exploits. > > The fact that all of the KVM escapes, especially the kernel-side > issues, were already in upstream is actually quite heartening I don't think that's accurate. Quoting the article, "This is what the agent used for the final exploit chain: three 0-days (at time of discovery) and one patched vulnerability that didn’t make it to my distribution kernel (because it was not recognized as a security issue)..." The tables below that show that *at least* two additional 0-days were found but not used in the exploit chain. So we have a problem where not only are 0-days readily discoverable by powerful enough agents, but even known and fixed vulnerabilities are still ripe for the picking when attacking a stable distro (or at least a sufficiently old stable distro). -- Aaron
pgpM9GzQd0ERm.pgp
Description: OpenPGP digital signature
