One audit of a network tool produced 24 vulnerabilities, 18 of them shipping
One Aisle AI curl audit produced 24 CVEs, 18 shipping today.
A random mix from the whole library. Shuffle for a new set.
One Aisle AI curl audit produced 24 CVEs, 18 shipping today.
A security researcher pointed GPT-5.6 Sol at MikroTik RouterOS 7.23.3 with a goal prompt to find a path from no login to remote code execution. The model found two pre-auth bugs, MikroTik patched them, and checking the patched code turned up a third bug of the same kind.
Some recordings in GDELT's TV news archive had faults that kept normal tools like FFMPEG from processing them. GDELT used AI 3.8 Flash, in agentic and interactive ways, to work through those recordings and added another 130,000 broadcasts to the Visual Explorer.
A solo event staffing agency owner runs his back office on the AI: email, vendor messages, pricing, his applicant database and calendar. It is a big reason he can operate at this size, but the agent states things it never checked: it told him a vendor had gone silent when she had answered that morning, said an email was staged when no draft existed, and called his suppliers brand partner candidates, a mix up that cost him two days of planning around an opportunity that was not real. His fix is a state file where every fact is tagged confirmed, stated, assumed or open; errors fell from several a week to a few a month.
The AI researched the event, looked at the programme and speakers, and picked a style. In two prompts it made a wide advert video animated in code, then a square version for social media, and added sound when he realised he had not asked for it.
In Tye Gordon's Lauderhill businesses, the agent roster includes Hope, whose whole lane is the gap after the AI receptionist takes a call: Hope follows up on those calls and sends the customer update texts and thank-you emails, each one approved by Tye first. The design point is that an answered call is not a finished job — somebody still has to close the loop with the customer, and that somebody is an agent working from the call record.
He fed the AI two copies of his resume, some parameters, and connections to more job sites than he has the energy to check. Every morning the AI checks them all and reports new postings, how well they fit his resume, and any gaps.
Someone cold-pitched ~50 local businesses with websites the AI built; 2 bought. The website-flipping idea came from the AI itself; he just made the calls.
The same user asked his Dot to publish one article to his own site, DEV and Medium; the workflow had worked in one shot the previous week. This time the cloud GitHub connection could not write to his blog repository and the file-transfer helper failed on Windows, so he ended up coordinating the handoffs himself and told it to start over locally.
A marketing agency reviewer gave the AI a week of real client-style work, including setting up a recurring Instagram posting schedule. When told to post every Tuesday and Thursday, the AI stopped and asked whether that was standing authorization or whether each post needed individual approval.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.