now that the KVM escape details are out (t.co/5QFoYyonbX)… if you’re wondering how i managed to rediscover it in under 2 hours after seeing the vercel bounty screenshot:
i gave openai’s gpt-5.6-cyber (daybreak red) access to a devbox to experiment and explore different directions for 1.5 hours.
then i spotted that the word after “guest-controlled” in the screenshot wasn’t properly redacted. those 3 dots gave away “virtio”. might seem like a small hint, but i passed it to my agent, and it got excited and found the vulnerability in 30 minutes. :))
opsec lesson right there.
Science
A security model rediscovered a KVM escape bug in two hours
Perplexity's detection and response lead gave GPT-5.6-cyber a dev box, then one unredacted word from a screenshot. The agent found the virtio bug about 30 minutes later; the details are now public.
646likes
50reposts
329saves
34Kviews
- Made with
- GPT-5.6-cyber
- Role
- Detection and response lead, Perplexity
- Posted
