HackiNews

Discovering and exploiting vulnerabilities in real-world software with Claude (www.anthropic.com)

16 points | by ledoge | 2 Comments

• cromka
  With this many exploits and, presumably, actors having access to their own, unpublished 0-days, doesn't it make sense to at least run the browser in isolated environment nowadays? I insist on installing everything from the package repository, but Flatpak/sandboxing may make more sense for a browser that is the biggest attack surface on a day-to-day device.
• 217
  Claude found with ~zero prompting:

  - Linux kernel 0click "packet to root" RCE (!!!!!) - Chrome RCE 1click - Safari RCE 1click - Windows kernel remote DoS - Android lock screen bypass

  Fully working, end-to-end exploits. Prompting was minimal like "pls make RCE"

  And this is just cyber. Imagine what this will mean in 12 months for bio, drones, robotics, etc, etc