We’re launching Lyria 3.5 in Google Flow Music, with advances across musicality, lyrics, vocals, and creative control
deepmind.google·6d ago
AI Engineering
Hacker News·16d ago·5 min read
Exploit brokers pay $500k for WordPress RCEs. I found one with GPT5.6 and $25
TL;DR
A security researcher discovered a remote code execution (RCE) vulnerability in WordPress using the GPT5.6 Sol Ultra model. By adapting a prompt designed for solving complex mathematical problems, they successfully identified the vulnerability.
✦ Why It Matters
Engineers should consider using AI models like GPT5.6 for vulnerability assessments in their software projects.
Key Takeaways
- Update WordPress installations to the latest version immediately.
- Consider using AI models for security research and vulnerability discovery.
- Monitor security advisories for new vulnerabilities in popular software.
- Implement robust security practices to protect against SQL injection attacks.
How It Works
The vulnerability arises from the WordPress batch API's flawed request validation process, which allows attackers to bypass sanitization checks. By exploiting this flaw, an attacker can manipulate requests to execute arbitrary SQL commands, leading to unauthorized access and potential RCE.