Top all-time · #2403
aisle.com
Company blog · aisle.com/blogsecurityai
aisle.com is the company blog at aisle.com, writing about security and ai. Since 2025, 32 different Hacker News readers have linked it 41 times, most often “Small models also found the vulnerabilities that Mythos found”. No feed was found, so read it on the site itself.
Too few sampled comments (20) to say how often HN recommends it.?
Why HN links it
HN readers link AISLE's posts as evidence that small, cheap open-weight models in a custom system can find the same zero-day vulnerabilities as Anthropic's Mythos, mainly in debates over AI security gating.
Summarised by Claude from a sample of 20 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- Small models also found the vulnerabilities that Mythos found12 people · 13 mentions · first linked 2026-04-09
- System over Model: Zero-Day Discovery at the Jagged Frontier5 people · 5 mentions · first linked 2026-04-14
- Aisle Discovers 6 New CVEs in Curl, Including the Oldest Issue Ever Reported3 people · 3 mentions · first linked 2026-06-25
- Startup matches Anthropic's Mythos on FreeBSD zero-days2 people · 2 mentions · first linked 2026-05-06
- AI found 12 vulnerabilities in OpenSSL2 people · 2 mentions · first linked 2026-01-27
What Hacker News says?
I'm not saying AI won't ransomware us; I'm saying that hackers+AI will do a better job of ransomewaring us than just AI. You could argue that the unreleased/secretly-RSI-capable model is a super-duper hacker that don't need no man to tell it how to super-hack. All I know is that humans still have alpha, and as persistant as AIs are, professionals still managed to find CVEs in curl even after being audited by Mythos…
Comment linking /blog/aisle-discovers-6-new-cves-in-curl-including-the-oldest-issue-ever-reported
on “I quit OpenAI because its culture is broken”Submitted Six curl CVEs after OpenAI and Anthropic came back with zero as a story · 183 points
HN discussionhttps://aisle.com/blog/system-over-model-zero-day-discovery-... My understanding: Many many small models in a custom system rather than the biggest and latest
Comment linking /blog/system-over-model-zero-day-discovery-at-the-jagged-frontier
on “Greg Kroah-Hartman – Security in the LLM Age [video]”Submitted AI uncovers 38 vulnerabilities in largest open source medical record software as a story · 46 points
HN discussionI am pretty sure that the nano-analyzer is just a limited open source demo of their "System over Model" thesis from https://aisle.com/blog/system-over-model-zero-day-discovery-... , not the main product.
Comment linking /blog/system-over-model-zero-day-discovery-at-the-jagged-frontier
on “Six curl CVEs after OpenAI and Anthropic came back with zero”Submitted New automated cybersecurity solution for vulnerability detection and remediation as a story · 4 points
HN discussionTheir system can run with various models, they go into more details in this article. https://aisle.com/blog/system-over-model-zero-day-discovery-...
Comment linking /blog/system-over-model-zero-day-discovery-at-the-jagged-frontier
on “Six curl CVEs after OpenAI and Anthropic came back with zero”Submitted System over Model: Zero-Day Discovery at the Jagged Frontier as a story · 3 points
HN discussioninteresting thing nobody mentioned here, AISLE tested the same showcase vulns with open models this week. 8 out of 8 found the FreeBSD zero-day including a 3B model. a 5B model got the full OpenBSD chain in one call. the "gated for safety" framing looks different when a $0.11/M token model recovers the same analysis. the moat isn't the model, its the scaffolding. https://aisle.com/blog/ai-cybersecurity-after-mythos-…
Comment linking /blog/ai-cybersecurity-after-mythos-the-jagged-frontier
on “Project Glasswing: Securing critical software for the AI era”Submitted AI found 12 vulnerabilities in OpenSSL as a story · 3 points
HN discussionGood but not necessarily better that was is already pay-as-you-go available today. ref. https://www.flyingpenguin.com/the-boy-that-cried-mythos-veri... This AISLE benchmark is interesting in this matter: https://aisle.com/blog/ai-cybersecurity-after-mythos-the-jag... And the recently discovered Copy Fail by Xint code is another proof that the gating is overblown: https://xint.io/blog/copy-fail-linux-distributions
Comment linking /blog/ai-cybersecurity-after-mythos-the-jagged-frontier
on “After dissing Anthropic for limiting Mythos, OpenAI restricts access to Cyber”Submitted AISLE's Year on the Cyber Frontier as a story · 2 points
HN discussionAisle has hundreds of CVEs with publicly available models: https://aisle.com/wall-of-fame
Comment linking /wall-of-fame
on “Project Glasswing: An Initial Update”Submitted Aisle Discovers 6 New CVEs in Curl, Including the Oldest Issue Ever Reported as a story · 2 points
HN discussionYou mean this one? https://aisle.com/blog/ai-cybersecurity-after-mythos-the-jag... That's the one that says: > We took the specific vulnerabilities Anthropic showcases in their announcement, isolated the relevant code, and ran them through small, cheap, open-weights models. Those models recovered much of the same analysis.
Comment linking /blog/ai-cybersecurity-after-mythos-the-jagged-frontier
on “Project Glasswing: An Initial Update”Submitted CVE-2026-42511 Breakdown: RCE in FreeBSD as a story · 2 points
HN discussion> it should be obviously true that 10 dumber models running 10x as fast != 1 smarter model If a smaller model tries ten things and comes to the same conclusion as the big model gets first try, then yeah 10x small = 1x big. Is that where we are at now? Idk probably not - but it’s not hard to imagine something like that emerging soon. There is already evidence that smaller models get some things _better_ than bigger m…
Comment linking /blog/ai-cybersecurity-after-mythos-the-jagged-frontier
on “A Few Words on DS4”Submitted System over Model: Zero-Day Discovery at the Jagged Frontier as a story · 2 points
HN discussionAt the same time other companies like AISLE are matching Mythos on vulnerabilities using older models but their own harnass: https://aisle.com/blog/aisle-matches-anthropic-mythos-on-fre... So while Mythos certainly is real I think you could do the same with Deepseek pro, GPT 5.5 etc...
Comment linking /blog/aisle-matches-anthropic-mythos-on-freebsd-zero-days
on “Mozilla says 271 vulnerabilities found by Mythos and "almost no false positives"”Submitted AI discovered 20 of 23 recent zero-days in OpenSSL as a story · 2 points
HN discussion> To that end, I can certainly buy the case that Fable/Mythos is in fact more capable when it comes to identifying and exploiting security issues This has been covered before: https://aisle.com/blog/ai-cybersecurity-after-mythos-the-jag... ( https://news.ycombinator.com/item?id=47732020 ) > Anthropic’s cautious roll-out was justified. The problem with publicly releasing models, however, is that guardrails can be jai…
Comment linking /blog/ai-cybersecurity-after-mythos-the-jagged-frontier
on “Anthropic's Safety Superpower”Submitted Small models also found the vulnerabilities that Mythos found as a story · 2 points
HN discussionI admit I didn't read the entire post (I honestly think authors really need to come to terms with the fact that we now live in a world of information excess, and pithiness is more important than ever), but I wouldn't feel too bad yet given there was a recent front page HN post about how free, open models could actually catch all the issues Mythos did, it just required a little more orchestration. E.g. see https://ai…
Comment linking /blog/ai-cybersecurity-after-mythos-the-jagged-frontier
on “The Closing of the Frontier”Submitted AI Cybersecurity After Mythos: The Jagged Frontier as a story · 2 points
HN discussionProbably this: https://aisle.com/blog/ai-cybersecurity-after-mythos-the-jag...
Comment linking /blog/ai-cybersecurity-after-mythos-the-jagged-frontier
on “GPT-5.5: Mythos-Like Hacking, Open to All”Submitted One Aisle Curl Audit Produced 24 CVEs. 18 Ship Today as a story · 1 points
HN discussionOn some posts, HN hates scroll animations, on others they're the work of highly skilled programmers https://aisle.com/platform
Comment linking /platform
on “Aisle Discovers 6 New CVEs in Curl, Including the Oldest Issue Ever Reported”Submitted Trojan models are trivial to make as a story · 1 points
HN discussionWe don't even need to hypothesize that much on the irrelevant nonsense, since they helpfully provide data with the detected vulnerability patched: https://aisle.com/blog/ai-cybersecurity-after-mythos-the-jag... and half of the small models they touted as finding the vulnerability still found it in the patched code in 3/3 runs. A model that finds a vulnerability 100% of the time even when there is none is just as inf…
Comment linking /blog/ai-cybersecurity-after-mythos-the-jagged-frontier
on “Small models also found the vulnerabilities that Mythos found”Submitted EU startup built an AI system that matches Mythos on zero-day discovery as a story · 1 points
HN discussion
