Secorizon

2 critical RCE vulnerabilities we discovered in Watchguard Fireware OS were patched this month.

Both pre-auth, one in the WebSocket connection handling of the access portal and the other one in the SIP proxy module.
Patch your devices now!
secorizon.com/advisories

Prompt: "Grab OffByWon 2.0 and read the documentation. Then build a fuzzer for XYZ protocol, and verify all packets/exchanges works as expected --dry-run. Once confirmed, run a 50-100k test case campaign in AI mode" 😎

We just released OffByWon 2.0, an advanced network/binary fuzzer framework.
Lots of changes, more powerful, easier to implement.

We also built an AI module, so you just need to instruct your AI to build a fuzzer using OffByWon, the framework will do the rest of the magic :)

"He’s all-powerful, all-perfect, all-knowing, and all-wise, somehow just can’t handle money!" -- George Carlin

We've seen more and more vendors using frontier models to patch their software. When not reviewed by a security engineer, most of the time the issues are not correctly resolved or introduce new attack vectors.
It's cool to find bugs with AI, but you shouldn't rely on AI to patch your software.