An AI agent found a 9.8 CVE in EPICS Base — patch to 7.0.11
Causal Security's Cipher found the bugs autonomously in under four hours — agent-found CVEs are real now — plus an open video world model you can run at home.
Copy markdown
An autonomous agent logged a critical CVE
Causal Security's AI agent Cipher turned up four zero-days in EPICS Base. The worst, CVE-2026-114595, is an unauthenticated integer overflow in network-request handling rated CVSS 9.8 — everything 7.0.10 and earlier is exposed. Patch to EPICS Base 7.0.11 (advisory published Oct 27); if any part of your stack touches EPICS — particle-accelerator and large-instrument control — update now.
Real CVEs now come from agents, not demos
Causal Security says Cipher found all four bugs in about 3 hours 49 minutes with no human in the loop. The takeaway for anyone shipping network services: a cheap autonomous agent can now credibly hunt your code, so it's worth pointing one at your own first.
Weekend build: steer a video world on one RTX 4090
Tencent Hunyuan quietly open-sourced Hy-Nomas (Apache 2.0), an interactive video world model you redirect mid-generation with text prompts and camera paths. The INT8 checkpoint runs on a single RTX 4090, with weights, code and a live demo already up — a rare world model you can actually run at home.