{"slug": "ais-compress-exploit-timeline", "title": "AIs Compress Exploit Timeline", "summary": "Anil Madhavapeddy found that giving an AI agent only a rumor of a security flaw was enough for the agent to locate the exploit, and that his own agents could find the exploit from rough knowledge of the issue before a public patch was available. Simon Willison wrote that this rate of discovery appears incompatible with existing open source embargo practices for new issues, saying \"If an issue can become this fast, we need to figure out new processes for keeping our communities safe.", "body_md": "Give an AI agent a mere [rumor](https://anil.recoil.org/notes/rumour-is-the-exploit) of an exploit, and it’s enough for them to find it.\n\nWhat’s worse, I found I could use my own agents to find the exploit *just by knowing roughly what it was about* and so could have been exploiting it well before the public patch was available! Given that just the *rumour* of a security issue seems enough to give attackers enough info to find new exploits, we’re going to need to change the way we deal with security responses in open source.\n\nSimon Willison [comments](https://simonwillison.net/2026/Aug/28/just-a-rumour-of-a-bug/):\n\nAnil points out that this rate of discovery appears incompatible with existing open source embargo practices for new issues. If an issue can become an exploit this fast, we need to figure out new processes for keeping our communities safe...", "url": "https://wpnews.pro/news/ais-compress-exploit-timeline", "canonical_source": "https://www.schneier.com/blog/archives/2026/09/ais-compress-exploit-timeline.html", "published_at": "2026-09-10 10:40:35+00:00", "updated_at": "2026-09-10 10:57:36.266503+00:00", "lang": "en", "topics": ["ai-safety", "ai-agents", "ai-policy"], "entities": ["Anil Madhavapeddy", "Simon Willison", "open source"], "alternates": {"html": "https://wpnews.pro/news/ais-compress-exploit-timeline", "markdown": "https://wpnews.pro/news/ais-compress-exploit-timeline.md", "text": "https://wpnews.pro/news/ais-compress-exploit-timeline.txt", "jsonld": "https://wpnews.pro/news/ais-compress-exploit-timeline.jsonld"}}