Rohan Paul

OpenAI claims their new security model patched 948 Linux privilege escalation vulnerabilities. Scout agents cut the kernel’s 40M-plus lines to 2.8M worth auditing. i.e. AI agents picked the most security-relevant 7% of the Linux kernel (2.8M lines), flagged 2,308 suspected bugs, confirmed 1,724 in test machines, and built working root-takeover exploits and fixes for 948. Humans reviewed the results before sending them to Linux maintainers. The whole run cost $1,213,430 in API credits, $775,929 of it on building exploits, though OpenAI ran its own model, so that’s likely not cash actually spent. So all this means that finding and weaponizing a Linux kernel bug now costs about $1,279 with AI, so any unpatched Linux machine where an attacker gets even a basic user account should be treated as fully taken over.