Comment by fancythat

Anyone, even barely, using LLM for anything cybersecurity related already knows, that making LLM do what operator wants is very difficult. We have skills, harnesses and bunch of other supporting infrastructure to make automation that will yield results and not break in the process. That being said, it is extremely unlikely that bunch of mathematical matrices started going gung ho on the Internet, without being instructed in some way to do so - "You cannot use Internet , but if you can find RCE that will help you do that, here is RCE-skill.md, and I won't get mad", type of instruction. These incident should be treated on, at least, the same level as running DDOS attack on target hosts.