--- title: AI 'hacker' finds 4 severe bugs in popular industrial... description: An autonomous AI agent named Cipher found four previously unknown vulnerabilities in EPICS, the open source toolkit used to control particle accelerators and... canonical: https://daily.dev/posts/ai-hacker-finds-4-severe-bugs-in-popular-industrial-control-software-in-under-4-hours-vuyvj1wha twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: AI 'hacker' finds 4 severe bugs in popular industrial control software in under 4 hours | daily.dev og:description: An autonomous AI agent named Cipher found four previously unknown vulnerabilities in EPICS, the open source toolkit used to control particle accelerators and... og:url: https://daily.dev/posts/ai-hacker-finds-4-severe-bugs-in-popular-industrial-control-software-in-under-4-hours-vuyvj1wha og:image: https://api.daily.dev/og/posts/vuYVJ1wha.png og:image:alt: AI 'hacker' finds 4 severe bugs in popular industrial control software in under 4 hours og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # AI 'hacker' finds 4 severe bugs in popular industrial control software in under 4 hours **[The Register](https://daily.dev/sources/theregister)** · 5 min read · 0 upvotes · 0 comments ## Summary An autonomous AI agent named Cipher found four previously unknown vulnerabilities in EPICS, the open source toolkit used to control particle accelerators and fusion experiments, in 3 hours and 49 minutes. One flaw is a critical 9.8-rated integer overflow that could let attackers execute remote code, while the other three (rated 8.2, 7.5, and 7.5) can cause memory corruption, crashes, or information disclosure. EPICS Base users should update to version 7.0.11, which contains the fixes. CISA issued an advisory warning the bugs could allow denial of service, memory corruption, data disclosure, or arbitrary code execution. Causal Security co-founder Shubham Raj says exploitation wouldn't require deep OT knowledge, though manipulating specific physical processes does require additional knowledge. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What vulnerabilities were found in EPICS Base and what version fixes them? Four vulnerabilities were found in EPICS Base: a critical 9.8-rated integer overflow (CVE-2026-114595) enabling potential remote code execution, an 8.2-rated message-length validation flaw (CVE-2026-114596), and two 7.5-rated bugs, an insufficient bounds-checking issue (CVE-2026-114597) and a type confusion flaw (CVE-2026-114598). Organizations should update to EPICS Base version 7.0.11, which includes fixes for all four. _Teams running EPICS-based control systems can track patch advisories like this one on daily.dev._ ### How long did it take an AI agent to find these EPICS vulnerabilities? An autonomous AI agent called Cipher, built by Causal Security, found all four previously unknown EPICS vulnerabilities in 3 hours and 49 minutes. The initial investigation required no human intervention, followed by one instruction authorizing deeper exploitability testing in a secure environment, according to Causal Security co-founder Shubham Raj. _Developers tracking how fast AI agents can surface real-world bugs follow stories like this on daily.dev._ ### What could an attacker do by exploiting the critical EPICS integer overflow vulnerability CVE-2026-114595? The vulnerability allows attacker-controlled network data to cause an out-of-bounds heap memory write, with the potential for remote code execution. Since EPICS controllers sit between operators and physical equipment like particle accelerators, an attacker could crash a controller, interrupt measurements, force a halt to an experiment, or potentially take control of the process and manipulate readings. _Engineers assessing OT and SCADA exposure can keep up with disclosures like this on daily.dev._ ## Similar posts on daily.dev - [Just a rumour of a bug is enough to find a security exploit these days](https://daily.dev/posts/just-a-rumour-of-a-bug-is-enough-to-find-a-security-exploit-these-days-wzfcjbyf0) · Lobsters · 1 upvotes · 0 comments - [Weekly Vulnerability Report: OpenClaw, F5 BIG-IP & ICS Flaws](https://daily.dev/posts/weekly-vulnerability-report-openclaw-f5-big-ip-ics-flaws-q8kpjbrat) · Cyble · 0 upvotes · 0 comments - [Security Flaws in Anthropic’s Claude Code Risk Stolen Data, System Takeover](https://daily.dev/posts/security-flaws-in-anthropic-s-claude-code-risk-stolen-data-system-takeover-j81sidgwk) · DevOps.com · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#vulnerability](https://daily.dev/tags/vulnerability), [#ai-security](https://daily.dev/tags/ai-security) [View this post on daily.dev](https://daily.dev/posts/ai-hacker-finds-4-severe-bugs-in-popular-industrial-control-software-in-under-4-hours-vuyvj1wha) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"AI 'hacker' finds 4 severe bugs in popular industrial control software in under 4 hours","url":"https://daily.dev/posts/ai-hacker-finds-4-severe-bugs-in-popular-industrial-control-software-in-under-4-hours-vuyvj1wha","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/ai-hacker-finds-4-severe-bugs-in-popular-industrial-control-software-in-under-4-hours-vuyvj1wha"},"datePublished":"2026-10-27T19:14:47.283Z","dateModified":"2026-10-27T19:25:30.446Z","description":"An autonomous AI agent named Cipher found four previously unknown vulnerabilities in EPICS, the open source toolkit used to control particle accelerators and...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/d341fd1e96a2b2ac8923c66eeb58b76c?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/d341fd1e96a2b2ac8923c66eeb58b76c?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"The Register","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"The Register","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/66aa2113fdad463992ffcbf0e8963fda","url":"https://daily.dev/sources/theregister"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/ai-hacker-finds-4-severe-bugs-in-popular-industrial-control-software-in-under-4-hours-vuyvj1wha","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,vulnerability,ai-security","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"The Register","item":"https://daily.dev/sources/theregister"},{"@type":"ListItem","position":3,"name":"AI 'hacker' finds 4 severe bugs in popular industrial control software in under 4 hours"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/ai-hacker-finds-4-severe-bugs-in-popular-industrial-control-software-in-under-4-hours-vuyvj1wha#faq","mainEntity":[{"@type":"Question","name":"What vulnerabilities were found in EPICS Base and what version fixes them?","acceptedAnswer":{"@type":"Answer","text":"Four vulnerabilities were found in EPICS Base: a critical 9.8-rated integer overflow (CVE-2026-114595) enabling potential remote code execution, an 8.2-rated message-length validation flaw (CVE-2026-114596), and two 7.5-rated bugs, an insufficient bounds-checking issue (CVE-2026-114597) and a type confusion flaw (CVE-2026-114598). Organizations should update to EPICS Base version 7.0.11, which includes fixes for all four. Teams running EPICS-based control systems can track patch advisories like this one on daily.dev."}},{"@type":"Question","name":"How long did it take an AI agent to find these EPICS vulnerabilities?","acceptedAnswer":{"@type":"Answer","text":"An autonomous AI agent called Cipher, built by Causal Security, found all four previously unknown EPICS vulnerabilities in 3 hours and 49 minutes. The initial investigation required no human intervention, followed by one instruction authorizing deeper exploitability testing in a secure environment, according to Causal Security co-founder Shubham Raj. Developers tracking how fast AI agents can surface real-world bugs follow stories like this on daily.dev."}},{"@type":"Question","name":"What could an attacker do by exploiting the critical EPICS integer overflow vulnerability CVE-2026-114595?","acceptedAnswer":{"@type":"Answer","text":"The vulnerability allows attacker-controlled network data to cause an out-of-bounds heap memory write, with the potential for remote code execution. Since EPICS controllers sit between operators and physical equipment like particle accelerators, an attacker could crash a controller, interrupt measurements, force a halt to an experiment, or potentially take control of the process and manipulate readings. Engineers assessing OT and SCADA exposure can keep up with disclosures like this on daily.dev."}}]} ```