Agent builds 100%-reliable Node.js brotli exploit in 5 unsupervised hours
jcran · x · 2026-10-25
Security researcher NotDeGhost showed a 100%-reliable Node.js brotli exploit produced by 5 hours of autonomous /goal runs with no human involvement. Crank Security's Dino Dai Zovi reposted, reminiscing that this used to take "5 manic hacker-days working from noon until 5am" — manual exploit development that once took roughly 5 person-days is now done autonomously in 5 hours, reshaping the economics of offensive security work.
More from coding & agent
- Git pushes quadruple to 320M per quarter as vulnerability counts lag — LLMs said to boost code security — max_paperclips · 2026-10-25
- Live MCP rewrite from Node to Rust cuts memory usage by roughly 8x — draginol · 2026-10-25
- Is decompiling with a coding agent hacking? X users clash over disclosure vs ownership — MickeySteamboat · 2026-10-25
- Dev launches free dashboard comparing benchmarks, API pricing and VRAM for 280+ LLMs — zackku · 2026-10-25
- Your notes are untapped agent context: why journaling beats generic prompts — EXM7777 · 2026-10-25
- Dev offers to pay extra for a 'terse mode' that caps agent replies at 5 lines — weswinder · 2026-10-25