Three Buddy Problem

← Three Buddy Problem7 okt · 1 u 09 min

Valentina Palmiotti (chompie) on Vulnpocalypse, Matching Mythos on a Budget

Valentina Palmiotti (chompie) on Vulnpocalypse, Matching Mythos on a Budget7 okt1 u 09 min

(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)

Three Buddy Problem x Offensive AI Con: Live from OAIC, IBM X-Force's Valentina Palmiotti (chompie) walks us through the autonomous Windows kernel exploit pipeline she built on older Claude models, which landed within a hair of Mythos for about $180 a chain.

Plus, the Pwn2Own bug Claude called unexploitable, why her Pwn2Own bugs still sit unpatched, disappearing exploit techniques, the dread of being a defender, and how Phrack found its way back into print.

Timestamps:

0:00 Intro and Pwn2Own war stories

3:46 What vibe hacking means

8:16 When long agent runs go sideways

10:31 Self-verification in an n-day kernel pipeline

16:11 Matching Mythos for $180 a chain

18:42 The bug Claude called unexploitable

21:49 Unpatched bugs and the defender gap

25:37 Mythos arrives through CVP