AI
An autonomous agent found four zero-days in particle-accelerator software
Causal Security's Cipher agent spent 3 hours 49 minutes on EPICS Base, the open-source control toolkit used at roughly 90 facilities including Argonne's Advanced Photon Source and ITER, and returned four previously unknown memory-safety bugs. CISA published the advisory on 27 October; the worst, CVE-2026-114595 at CVSS 9.8, is an integer overflow that produces an attacker-controlled heap write. Fixes shipped in EPICS Base 7.0.11.