TLDR Tech / Dev
The Recent CVEs in React and Node.js Were Found by an AI
An AI system discovered zero-day vulnerabilities in Node.js and React, including a sandbox escape via Unix sockets and a DoS attack affecting Next.js apps. The AI independently executed a full security research process, leveraging its 'hallucination' capability to envision novel attack scenarios that typical scanners miss.
Read the full story