Zero-Day Flaw in Linux Kernel Found by AI-Equipped Security Researcher - Infosecurity Magazine

Ah, the Linux kernel: a monument to open-source collaboration, maintained by volunteers who definitely didn't miss a nine-year-old privilege escalation bug, 'Copy Fail,' until Taeyang Lee at Theori fed it to an AI. Because nothing says 'we have our act together' like a root-access zero-day that's been lurking since 2017. Physical access required? Sure, because USB drops are so passé. The real headline here is that the AI did the work—leaving us to wonder how many more of these time-capsule vulnerabilities are waiting for their own AI-assisted unmasking.

Theori's Lee gets to be the hero, but let's not pretend this isn't a harbinger of the offence-defence balance tipping hard. State-sponsored groups have access to the same tools—or better. The fact that this was found by a researcher with a conscience is cold comfort. Nine years. That's how long a bug that grants god-mode access sat unnoticed. And we're supposed to be reassured that AI can find them? It can also write them. The gap between AI-augmented security research and AI-augmented exploitation isn't a gap; it's a hair's breadth.

So congratulations to Theori for a job well done. But while we pat backs, the same technology is being weaponized by actors who don't disclose. 'Copy Fail' is a nice name, but the real failure is the collective delusion that AI will save us from problems it's equally capable of creating. The only thing physical access grants in this story is a front-row seat to the AI-driven security arms race. And we're all in the audience, hoping the next zero-day isn't the one that doesn't get reported.