University of Toronto researchers built an AI worm that broke into ~75% of machines on a simulated 33-machine corporate network in one week, without human intervention. The worm adapted in real time by reading live vulnerability advisories and finding new exploits on its own. Patch one bug, and you stop a traditional worm. But as the researchers saw with AI-powered worms, they just find another bug. And another. This was a controlled environment. But the worm ran on open-weight models, which are available for anyone to download. The speed at which attackers weaponize lab demos, like this one, into live exploits has outpaced the speed at which most organizations can patch. Already, many organizations have unpatched known vulnerabilities and yet have avoided getting hacked into oblivion. Now, defenders might have to be right everywhere, all at once, to stop an AI-powered worm. The conventional response would be: just fix your software. But as RunSybil CEO Ari Herbert-Voss told Fortune, "Most organizations already have more vulnerabilities than they can realistically address," and “The challenge is knowing what actually matters for an attacker to gain control,” So how can security programs still operating at human-pace due to token budgets, time, and operational constraints fix their software while attackers are moving at machine speed? Enter Sybil. Sybil accelerates application security by continuously identifying and remediating threats at machine pace, as applications change. Leaders can finally see what's been tested, what's been found, and where the gaps are across their internal and external attack surface.

we got early access to Opus 4.8 and used it to hack a Nintendo 64 game you forgot about. here's what it didn't find: 1/

but with someone at the wheel who knows what they’re doing? it shines! in a few hours our researcher @sshell_ went from idea to code execution and a reliable exploit. read it here runsybil.com/post/exploiting… 3/

We're hiring an entry-level security analyst! Each day is a new adventure with @BonJarber and the other engineers at RunSybil

Our Friday sitdown started with new headshots and ended with this. We're hiring. Come join the swamp 1/

Also, welcome to our newest sybilian, @dariushoule, who joined us last week. He's an expert breaker of all things software, retro computer enthusiast, and lowkey graphic designer? Welcome! 2/

We prompted Sybil to introduce themselves. What came back was methodical, opinionated, and included an astrological chart.

Sybil is RunSybil's security authority. They’re a multi-agent system that continuously tests your applications and infrastructure for exploitable vulnerabilities by reasoning about your applications the way an elite researcher would.