Vulnerability Disclosure Drives Significant Media Coverage for Xint.io

With the rise of AI-native pentesting (and new LLMs like Mythos and GPT Cyber), the vulnerability disclosure game changed overnight. The research team at Theori and Xint.io responsibly disclosed a new zero-day for Linux source code called Copy Fail that allowed an unprivileged local attacker to gain root permissions on any Linux kernels released since 2017. This is one of the first major zero-day discoveries driven primarily by autonomous AI pentesting and had gone undiscovered for nearly a decade. 

Due to coordination efforts, Voxus was unable to provide the media with any advanced notice of the disclosure (and was only informed of the release timeline days before it happened). As a result, the team had to coordinate a massive media blitz on disclosure day to security and Linux/open-source press. This included explaining to press the severity of the exploit, how it worked, what it allowed attackers to accomplish, and more. The team then had to coordinate in real-time, media requests for interviews and email commentary.