Sign in

Stanislav Fort

@stanislavfort.bsky.social
2.3K followers 622 following 126 posts

AI + security at AISLE | Stanford PhD in AI & Cambridge physics | scientific progress

PostsRepliesMedia
Stanislav Fort @stanislavfort.bsky.social · 08/09/2026
Disclosure timeline: 1. VS Code + Cursor: found in Sep 2025 2. Cursor: fixed immediately 3. Antigravity: found after launch in Jan 2026, fixed by Google in ~days 4. Microsoft: later patched upstream VS Code Full technical write-up on the AISLE blog: aisle.com/blog/aisle-d...
aisle.com
A 1-Click RCE Issue in Cursor, VS Code, and Antigravity
Learn how our AI found a one-click RCE vulnerability in 3 code editors: Cursor, VS Code, and Google Antigravity.
020
Stanislav Fort @stanislavfort.bsky.social · 08/09/2026
Here’s the exploit end-to-end: Click the harmless-looking link in a commit message -> the expected webpage opens normally Meanwhile, in the background, the exploit steals API keys & certificates & installs a persistent keylogger, all with no security warning or confirmation
111
Stanislav Fort @stanislavfort.bsky.social · 08/09/2026
Now that it's fixed, I can show this one! AISLE's AI autonomously found a zero-day in Cursor, Google Antigravity & Microsoft VS Code = tools used by 50M+ devs One harmless-looking link could let an attacker take over your computer, and AISLE's AI built a working exploit for it
121
Stanislav Fort @stanislavfort.bsky.social · 04/09/2026
Not necessarily. It's a sequence of decisions. The posterior at the end of one becomes the prior in the next. That's why the use of the word prior is correct.
000
Stanislav Fort @stanislavfort.bsky.social · 02/09/2026
OpenAI's Codex Security and Anthropic's Mythos both reported 0 remaining security issues in curl AISLE then discovered 6 new zero-days that curl's security team validated & has now assigned CVEs to 6-to-0 on one of the world’s most hardened codebases: aisle.com/blog/aisle-d...
0172
Reposted by Stanislav Fort
daniel:// stenberg:// @bagder.mastodon.social.ap.brid.gy · 25/08/2026
Mythos: 0 Aisle: 29 😱
0114
Stanislav Fort @stanislavfort.bsky.social · 28/07/2026
Most AI-for-cyber work is evaluated on toy tasks & artificial benchmarks. AISLE goes after the real thing = previously unknown zero-days in some of the world's most secure code. And we're matching & beating frontier systems using widely available & open-source-derived models.
011
Stanislav Fort @stanislavfort.bsky.social · 21/07/2026
That's such a needlessly totalizing position. Of course you can know the outcome of your actions to some extent. If you couldn't, you literally couldn't act in the world. Given that you can act, you very obviously can make predictions like that.
100
Stanislav Fort @stanislavfort.bsky.social · 21/07/2026
A basic test like what? The author is a good professor of philosophy from Oxford. If you found a trivial error, it is worth sharing (though I strongly expect you haven't)
100
Stanislav Fort @stanislavfort.bsky.social · 25/06/2026
That "Squidbleed" vulnerability (CVE-2026-47729) that Mythos"discovered" in April? Yeah no AISLE actually already reported it back in March, full 44 days before Mythos. Another great live example of the value of the system over the model in zero-day discovery.
2212
Stanislav Fort @stanislavfort.bsky.social · 18/06/2026
Because it can help people without the radiation of a CT and without the superconducting magnets (and their cooling) needed for an MRI?
100
Stanislav Fort @stanislavfort.bsky.social · 18/06/2026
The good thing here is that it's supposed to reference that meme AND that we can deploy AISLE locally air-gapped
100
Stanislav Fort @stanislavfort.bsky.social · 17/06/2026
Very good point! We're also proactively deployed on new PRs on e.g. curl and OpenSSL to make sure that new vulns are not being introduced into the codebase. I think you're totally right that the archeological work of findings old vulns is only a small part of the full story.
111
Stanislav Fort @stanislavfort.bsky.social · 17/06/2026
Here's a critical one with CVSS 10.0 (the maximum) in Samba. It was hidden for 13 years before we found it and fixed it: aisle.com/blog/cve-202...
aisle.com
The CVSS 10.0 Vulnerability That Hid in Samba for 13 Years
Critical Samba CVE-2025-10230 with CVSS 10.0 score lay hidden for 13 years before AISLE's discovery. Learn about this infrastructure threat.
120
Stanislav Fort @stanislavfort.bsky.social · 17/06/2026
With AISLE match Mythos-level performance on zero-day discovery specifically, which is extremely important (including strategically), but we do not claim parity on general reasoning or anything like that.
160
Stanislav Fort @stanislavfort.bsky.social · 17/06/2026
We matched Mythos on public zero-days with CVEs using widely available & open-source derived models & can run it air-gapped if needed. All this with a small team out of Europe Berkeley study ranks us #1 globally in 3 of 8 categories The full evidence: stanislavfort.substack.com/p/mythos-at-...
stanislavfort.substack.com
"Mythos" at Home, and It's Called AISLE
A startup out of Europe built an AI system that matches Mythos on zero-day discovery, using widely available models, even air-gapped. You've probably never heard of it. Here's the evidence.
314335
Stanislav Fort @stanislavfort.bsky.social · 13/06/2026
Anthropic just got ordered to suspend all access to Mythos & Fable & every customer lost access overnight. This is why we built AISLE to run even on open-source models, air-gapped. We match Mythos on zero-days, based out of Europe: aisle.com/blog/aisle-matches-anthropic-mythos-on-freebsd-zero-days
0183
Stanislav Fort @stanislavfort.bsky.social · 30/05/2026
Berkeley's independent rating of AI for zero-days just dropped (vuln.cs.berkeley.edu): My startup AISLE is #1 globally in 3 out of 8 categories! 1) total zero-days with CVEs 2) breadth of vuln types 3) coverage of most dangerous vuln types Beating both Google and Anthropic!
1211
Stanislav Fort @stanislavfort.bsky.social · 07/05/2026
Zero-day discovery with AI is way bigger than a single team and given the magnitude and importance of the problem, only democratization of access to defensive tools will secure our future with strong AIs. Full write-up on our blog: aisle.com/blog/aisle-m...
aisle.com
AISLE matches Anthropic Mythos on FreeBSD zero-days
In April 2026, FreeBSD published 8 security advisories. Of these, three were found by Nicholas Carlini at Anthropic using Claude, and three were discovered by AISLE using our AI system. The codebase w...
020
Stanislav Fort @stanislavfort.bsky.social · 07/05/2026
Anthropic chose FreeBSD to showcase their Mythos zero-days. In the latest release, 8 CVEs were announced: 3 found by Anthropic, 3 discovered by AISLE's AI (!) AISLE is matching Mythos 3-for-3 on zero-days on the very codebase of their choosing at a fraction of the cost
150
Stanislav Fort @stanislavfort.bsky.social · 01/05/2026
All of these CVEs are now patched. OpenEMR is also running AISLE on new code changes to proactively catch vulnerabilities before they reach production. We're incredibly proud we can help secure our healthcare infrastructure. Full write-up here: aisle.com/blog/aisle-d...
aisle.com
AISLE Discovers 38 CVEs in Healthcare Software Used by 100,000 Medical Providers
38 zero-day security vulnerabilities, three critical, and the shift from disclosure to prevention in healthcare software
010
Stanislav Fort @stanislavfort.bsky.social · 01/05/2026
AISLE is proud to partner with OpenEMR, the open-source medical records platform used by 100k providers & 200M+ patients globally. Our AI security system uncovered 38 historical CVEs in OpenEMR, including 2 max critical severity CVSS 10.0 zero-days.
130
Stanislav Fort @stanislavfort.bsky.social · 24/04/2026
Beyond finding historical bugs, AISLE is now deployed live on OpenSSL pull requests, catching vulnerabilities before they ship. We've already prevented several from reaching production. OpenSSL now lists AISLE as an in-kind supporter Full write-up: aisle.com/blog/aisle-d...
aisle.com
AISLE Discovers 20 OpenSSL Zero-Days in 6 Months
On April 7, 2026, OpenSSL, the cryptographic backbone of the internet, published a security advisory patching 7 new security vulnerabilities.
000
Stanislav Fort @stanislavfort.bsky.social · 24/04/2026
AISLE has discovered 20 of 23 OpenSSL zero-days (CVEs) across the last 3 consecutive security releases Latest release: 5 of 7 are AISLE 1 was co-reported by Anthropic (Mythos?) 63 days after AISLE OpenSSL encrypts 2/3 of the internet 10 fixes accepted straight into production
161
Stanislav Fort @stanislavfort.bsky.social · 16/02/2026
OpenClaw has 200k stars and gives AI agents shell access, API keys, and code execution. 42,000 exposed instances on the public internet. Everyone is asking what AI agents can do. Almost nobody is asking who secures them. We at AISLE do. Blog post: aisle.com/blog/aisle-t...
aisle.com
AISLE Becomes the #1 Source for OpenClaw Security Disclosures
AISLE is the largest source of security findings in OpenClaw, exposing risks in AI agents with shell access, file system control, and API keys to y...
010
Stanislav Fort @stanislavfort.bsky.social · 16/02/2026
AISLE is now the #1 source of accepted security findings in OpenClaw, the fastest-growing AI agent framework. Our AI discovered 15 vulnerabilities: 1 Critical (CVSS 9.4), 9 High, 5 Moderate. 21% of all OpenClaw security advisories globally are from us, more than anyone else ⏬
280
Stanislav Fort @stanislavfort.bsky.social · 09/02/2026
Daniel Stenberg of curl now invokes our Analyzer on his PRs. His reaction to the OpenSSL news: "I'm a little amazed.. 12(!) of them were reported by people at Aisle... if you are curious what AI can do for Open Source security when used for good" Blog: aisle.com/blog/what-ai...
aisle.com
What AI Security Research Looks Like When It Works
What a year of finding zero-days in OpenSSL, curl, and the Linux kernel taught us about AI-driven security research done right.
020
Stanislav Fort @stanislavfort.bsky.social · 09/02/2026
New post on what AI cybersecurity research looks like when it actually works! I wrote up what we've learned discovering 12 of 12 new OpenSSL zero-days, 5 CVEs in curl, and additional 100+ validated CVEs across critical open source infrastructure, middleware, and secure apps 🔗⏬
111
Stanislav Fort @stanislavfort.bsky.social · 01/02/2026
Thanks for sharing! Happy to answer any questions you / your followers might have. The full thread with more details is here: bsky.app/profile/stan... I'm genuinely excited and slightly worried how far we've managed to push our AI system. A CVE is one thing, but we've now industrialized the process.
010
Stanislav Fort @stanislavfort.bsky.social · 01/02/2026
At AISLE (aisle.com) we're creating Al to secure the world's most critical software infrastructure. We've discovered & fixed 100s of zero-days in some of the most important code on the planet. We're hiring people who share our mission! OpenSSL 12/12 CVEs post: aisle.com/blog/aisle-d... 6/6
aisle.com
AISLE Discovered 12 out of 12 OpenSSL Vulnerabilities
AISLE's autonomous analyzer found all 12 CVEs in the January 2026 coordinated release of OpenSSL, the open-source cryptographic library that underp...
000
Stanislav Fort @stanislavfort.bsky.social · 01/02/2026
Their bug bounty just died from Al slop, while we reported >30 real fixed vulns. The ceiling is rising as fast as the median is collapsing. The whole distribution is bifurcating and any single point-estimate of what it is is bound to be an incomplete narrative. 5/6
100
Stanislav Fort @stanislavfort.bsky.social · 01/02/2026
Full blogpost here, including how this connects to our 5 new CVEs in another pillar of the OSS infra = curl (thanks go to @bagder.mastodon.social.ap.brid.gy for his excellent job building and maintaining it): lesswrong.com/posts/7aJwgb... 4/6
lesswrong.com
AI found 12 of 12 OpenSSL zero-days (while curl cancelled its bug bounty) — LessWrong
This is a partial follow-up to AISLE discovered three new OpenSSL vulnerabilities from October 2025. …
110
Stanislav Fort @stanislavfort.bsky.social · 01/02/2026
HIGH severity CVEs in OpenSSL average less than 1 per year. This release includes one & we discovered it: CVE-2025-15467 A stack buffer overflow that requires no authentication. Parsing untrusted CMS content could be vulnerable. Pre-auth remote code execution in OpenSSL is wild! 3/6
110
Stanislav Fort @stanislavfort.bsky.social · 01/02/2026
In Fall 2025, we announced that our Al system discovered 3 of 4 OpenSSL CVEs that year. Already historically unprecedented, but we kept pushing. Three months later, the final count is: 13 of 14 OpenSSL CVEs in 2025, discovered by our Al 2/6
100
Stanislav Fort @stanislavfort.bsky.social · 01/02/2026
OpenSSL secures most of the internet's encryption. They just patched 12 new zero-day vulnerabilities. Our Al system developed by AISLE is responsible for discovering all 12/12, every single one of them. This includes a pre-auth HIGH severity one & 3 that lurked there for >25 years! 1/6
162
Stanislav Fort @stanislavfort.bsky.social · 01/02/2026
I can help out! Do you want to dm me?
000
Stanislav Fort @stanislavfort.bsky.social · 01/02/2026
What would you like to know?
000
Stanislav Fort @stanislavfort.bsky.social · 01/02/2026
We discovered them. The OpenSSL maintainers, nor anyone else in the world, likely knew they existed.
010
Stanislav Fort @stanislavfort.bsky.social · 15/10/2025
What are they worried about?
030
Stanislav Fort @stanislavfort.bsky.social · 03/10/2025
💯 this
030
Stanislav Fort @stanislavfort.bsky.social · 26/07/2025
I doubt the AI overviews are a big deal in the total number tbh. Gemini is extremely useful and e.g. I'm running at least >1B tokens a day through it for sure.
210
Stanislav Fort @stanislavfort.bsky.social · 19/07/2025
I totally disagree. Bluesky has an unproductive anti-AI mindset that is often propagated by people who are nominally experts (e.g. professors) but who have not kept up with the pace of change in AI and therefore are practically useless in judging its potential. It's surprisingly bad on here re AI
150
Stanislav Fort @stanislavfort.bsky.social · 21/06/2025
This level of ignorance is surprising but unfortunately legitimately dangerous, giving the readers a pleasant but ultimately false idea that AI is just not that good really. One doesn't have to rely on academic experts here -- just trying out using LLMs clearly shows that they are *extremely* useful
0110
Stanislav Fort @stanislavfort.bsky.social · 08/05/2025
This is obviously not correct. "The wealthy" are not responsible for climate change. The industrial civilization as a whole is, but because it also produces so much net positive value to humans it's a good trade-off to have made. The zero sum mindset you're displaying is misdiagnosing the issue.
260
Stanislav Fort @stanislavfort.bsky.social · 08/03/2025
This is a very weak argument likely based on vibes. SpaceX is both very efficient (price per ton to orbit is very low => demand from customers) & they do things that no company or government is able to do (massive reusability of orbital rockets). You should check out the Falcon 9 track record.
000
Stanislav Fort @stanislavfort.bsky.social · 13/02/2025
In a narrow subfield it generally correlates with that, yes. But that's off topic, you should address the point about functional equivalence I made if you want to continue the discussion.
100
Stanislav Fort @stanislavfort.bsky.social · 13/02/2025
Successfully acting as if it had knowledge is functionally equivalent to having knowledge. The distinction you are making is a selective call for rigor that even humans would have a hard time passing.
130
Stanislav Fort @stanislavfort.bsky.social · 13/02/2025
Yet you misread a simple plot, drew an obviously wrong conclusion, and ran with it because it supported your biases.
100
Stanislav Fort @stanislavfort.bsky.social · 13/02/2025
I disagree and happen to be a co-author on an early paper addressing this very question: arxiv.org/abs/2207.05221
arxiv.org
Language Models (Mostly) Know What They Know
We study whether language models can evaluate the validity of their own claims and predict which questions they will be able to answer correctly. We first show that larger models are well-calibrated o...
210
Stanislav Fort @stanislavfort.bsky.social · 13/02/2025
I think you are confusing knowing things and being sentient. These are very different concepts. In the end I do not practically care if the LLM has qualia as long as it is performing as if it knew things functionally (and it does exactly that)
110