I don't agree with the "no tsunami in sight": if you don't look at 100+ bugs in Firefox and many more OSS projects, bunch of old unseen-before OpenBSD/Linux RCEs, and a few LPE in just 2 or 3 weeks for Linux itself...

IMO, this does not sound like marketing scare, there is spike of vulnerability disclosures - high quality, low false positives - that can be sensed... It feels like we're speedrunning through few-years worth of high quality bug reports in just a few weeks.

▲

apexalpha 2 hours ago | parent [-]

The LPEs were not found with Mythos but with existing, publicly available models.

	▲	stingraycharles an hour ago \| parent [-]
		And also: they did an earlier run with Opus to discover bugs (like segfaults). In February, Opus discovered a whole bunch of security related bugs, but didn’t exploit them. Mythos, in turn, was fed these bugs and told to exploit them. Not saying it’s not impressive, but it was literally told “here are all the places our metal detector says there may be gold, please find gold”.