Slava Moskvin (@sl4v.bsky.social)

Proof that AI can now find 0-days even w/o agents or advanced tooling. Also pretty cool: o3 managed to find the vulnerability only 8 out of 100 times. I hadn’t realized it might take that many tries to get a useful result from AI. sean.heelan.io/2025/05/22/h... #linux #infosec #llm

loading . . .

How I used o3 to find CVE-2025-37899, a remote zeroday vulnerability in the Linux kernel’s SMB implementation In this post I’ll show you how I found a zeroday vulnerability in the Linux kernel using OpenAI’s o3 model. I found the vulnerability with nothing more complicated than the o3 API &#821… https://sean.heelan.io/2025/05/22/how-i-used-o3-to-find-cve-2025-37899-a-remote-zeroday-vulnerability-in-the-linux-kernels-smb-implementation/