Ohmec

The problem is, by and large, that AI has drastically reduced time to exploitation of vulnerabilities that modern CVEs are often under-representing their severity. If you've worked in security this year, it's been a march of vulnerability after vulnerability and everyone is waiting for the next big one that exposes your systems.

The fact that this particular CVE doesn't have an easily exploitable path has meant very little, historically, in the modern threat landscape. AI has proven it's able to pull off chaining multiple exploits that are very difficult or hard to pull off, but a machine does not care for "ease" or "difficulty".

All that is to say, the security community is currently a little gun-shy, but with good reason.

You probably use old.reddit and a legacy app, right?

There's probably scripts you can add to your ubo to combat this.

Inverting the privilege pyramid does not make for a balanced and healthy system.