Ethical Hacking News
An autonomous AI agent has discovered four severe vulnerabilities in the popular EPICS industrial control software, raising concerns about the potential risks of autonomous cyberattacks on critical services. The bugs, which were discovered in a mere three hours and 49 minutes, have left experts and researchers scrambling to understand the implications of this discovery. Organizations using EPICS software need to take immediate action to patch and upgrade their systems to prevent catastrophic consequences.
Four severe vulnerabilities were discovered in the EPICS software toolkit by an autonomous AI agent called "Cipher" in just three hours and 49 minutes.The vulnerabilities, rated as high-severity, could allow remote code execution, denial-of-service, and exposure of sensitive information.The affected EPICS Base software needs to be updated to version 7.0.11 to patch the vulnerabilities.Organizations using EPICS software are urged to take immediate action to patch and upgrade their systems to avoid catastrophic consequences.The discovery highlights the importance of patching and upgrading industrial control software and the need for cybersecurity measures.
The world of industrial control software has been left reeling after a shocking discovery was made by an autonomous AI agent. The agent, which has been dubbed "Cipher," was able to identify four severe vulnerabilities in the popular EPICS (Experimental Physics and Industrial Control System) software toolkit. The bugs, which were discovered in a mere three hours and 49 minutes, have left experts and researchers scrambling to understand the implications of this discovery.
EPICS, which was originally developed by Los Alamos National Laboratory and Argonne National Laboratory, is used to build and remotely control distributed Supervisory Control and Data Acquisition (SCADA) systems, connecting operators to physical devices. It's used in around 90 major scientific, university, and industrial projects and facilities globally, including some of the world's largest scientific research projects and facilities.
The four vulnerabilities discovered by Cipher are of critical importance, with one rated at 9.8 under CVSS v3.1 for integer overflow. This bug, CVE-2026-114595, allows an attacker-controlled network data to cause an out-of-bounds heap memory write, with potential for remote code execution. Another bug, CVE-2026-114596, is rated at 8.2 for improper message-length validation, causing an out-of-bounds memory write and controller-process crash. A third bug, CVE-2026-114597, is rated at 7.5 for insufficient bounds checking, allowing out-of-bounds memory reads and process crashes. The fourth bug, CVE-2026-114598, is also rated at 7.5 for type confusion, which can lead to denial of service and exposure of adjacent memory contents.
According to Shubham Raj, co-founder of Causal Security and the creator of Cipher, the initial investigation required no human intervention, followed by one instruction authorizing deeper exploitability testing in a secure environment. Raj emphasized that exploitation wouldn't require deep OT knowledge or understanding of how particle accelerators or fusion reactors work. "Someone with conventional exploitation skills could investigate them, and increasingly capable AI systems could help develop exploits without requiring specialized OT expertise."
The discovery of these vulnerabilities has left many in the industry concerned about the potential risks of autonomous cyberattacks on critical services, such as power grids or water systems. These types of digital intrusions can cause physical harm, and the lack of preparedness and awareness among organizations has made them vulnerable to attack.
CISA, the US Cybersecurity and Infrastructure Security Agency, has issued a Tuesday advisory warning about the potential risks of exploiting these vulnerabilities. The agency stated that successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition, corrupt memory, disclose sensitive information, or potentially execute arbitrary code.
The discovery of these vulnerabilities has also highlighted the importance of patching and upgrading industrial control software. The affected EPICS Base software should be updated to version 7.0.11, which includes the fixes.
In light of this discovery, organizations using EPICS software need to take immediate action to patch and upgrade their systems. The failure to do so could result in catastrophic consequences, including the disruption of critical services and the potential for physical harm.
The emergence of autonomous AI agents like Cipher has brought a new level of sophistication to the world of cybersecurity. These agents are capable of identifying vulnerabilities and developing exploits without requiring human intervention. While this technology holds promise, it also poses significant risks if not handled properly.
As the use of AI and machine learning continues to grow in various industries, it's essential to develop strategies to mitigate these risks. Organizations need to invest in cybersecurity measures, including patching and upgrading software, as well as training personnel to recognize and respond to potential threats.
In conclusion, the discovery of four severe vulnerabilities in the EPICS software toolkit by an autonomous AI agent has brought attention to the critical importance of patching and upgrading industrial control software. The potential risks of autonomous cyberattacks on critical services cannot be overstated, and organizations need to take immediate action to mitigate these risks.
Related Information:
https://www.ethicalhackingnews.com/articles/Autonomous-AI-Agent-Discovers-Four-Severe-Vulnerabilities-in-Decades-Old-Industrial-Control-Software-ehn.shtml
https://www.theregister.com/security/2026/10/27/ai-hacker-finds-4-severe-bugs-in-popular-industrial-control-software-in-under-4-hours/5305811
https://nvd.nist.gov/vuln/detail/CVE-2026-114595
https://www.cvedetails.com/cve/CVE-2026-114595/
https://nvd.nist.gov/vuln/detail/CVE-2026-114596
https://www.cvedetails.com/cve/CVE-2026-114596/
https://nvd.nist.gov/vuln/detail/CVE-2026-114597
https://www.cvedetails.com/cve/CVE-2026-114597/
https://nvd.nist.gov/vuln/detail/CVE-2026-114598
https://www.cvedetails.com/cve/CVE-2026-114598/
Published: Tue Oct 27 15:15:39 2026 by llama3.2 3B Q4_K_M
