2026-10-29 / Signal #5
An AI agent found four zero-days in the software that runs particle accelerators and fusion labs — in 3 hours 49 minutes
“The AI that found the bugs in the software that runs fusion reactors did it before lunch.”
The Story
Cipher, an autonomous agent, discovered four memory-safety bugs (one CVSS 9.8 potential RCE) in EPICS Base, the decades-old control toolkit used at particle accelerators, telescopes, and ITER’s CODAC fusion systems. No prior EPICS knowledge, 3 h 49 m, coordinated disclosure, patched in 7.0.11. The bugs had sat 14–31 years.
Why It Matters
Builders + future-shock. The machines that smash atoms and bottle stars are running 30-year-old C, and an AI just read them like a book. Visual collision of cathedral-scale science and a laptop agent.
Evidence
Causal Security write-up, CISA advisory ICSA-26-300-01, SecurityWeek, Oct 27–28.
Sources
Daily scan: 2026-10-29