gcdRadar
archive/Research/AIR-2026-1513
closedclosed 9 Nov 2026Research1 Research / proof of conceptAI

Ulysses: Multi-Agent security harness for synthesizing verifiable web exploits

Ulysses

Researchers proposed a multi-agent framework called Ulysses that utilizes LLMs to synthesize and verify web application vulnerabilities. The approach converts candidate findings into verified proofs of exploitability through iterative exploration.

first report
26 Oct 2026
last update
26 Oct 2026

Timeline · 1

  1. 26 Oct 2026Ulysses: A Security Harness For Synthesizing Verifiable Web Exploits

Sources · 1

Research and catalogues

  1. 2026-10-26

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
AI-enabled attack
categories
AI-assisted intrusion
severity
1 · Research / proof of concept
targets
Not applicable
owasp llm top 10
no entry for these categories
mitre atlas
no technique for these categories
dates
happened 26 Oct 2026 · first reported 26 Oct 2026
origin
News & research feeds
record
confidence 0.90 · created 2026-10-26 05:15Z · updated 2026-11-10 00:11Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# Ulysses: Multi-Agent security harness for synthesizing verifiable web exploits

https://gcdradar.vercel.app/incidents/ulysses-multi-agent-security-harness-for-synthesizing-verifi · AIR-2026-1513 · closed 2026-11-09

- Lane: Research
- Severity: 1 (Research / proof of concept)
- Fix status: Fix status unknown
- First reported: 2026-10-26
- AI role: AI-enabled attack
- Products: Ulysses

## Summary

Researchers proposed a multi-agent framework called Ulysses that utilizes LLMs to synthesize and verify web application vulnerabilities. The approach converts candidate findings into verified proofs of exploitability through iterative exploration.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-10-26: Ulysses: A Security Harness For Synthesizing Verifiable Web Exploits (https://arxiv.org/abs/2610.31831)

## Sources

- 2026-10-26 arXiv: Ulysses: A Security Harness For Synthesizing Verifiable Web Exploits https://arxiv.org/abs/2610.31831

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. live
    ArcticRAT ArcticRAT Cybercrime Gang Profiles Victim Finances With AI

    Breaches & attacks · Exploited · since 13 Nov 2026

    AI
  2. live
    AI
  3. live
    Kazakhstan-linked hackers used AI agent to spy on Central Asian governments

    Breaches & attacks · Exploited · since 12 Nov 2026

    AI
  4. live
    Credential stuffing campaign spoofs consumer AI agent traffic

    Breaches & attacks · Exploited · since Oct 2026 (approx.)

    AI
  5. live
    AI
  6. live
    AntiFox Hackers use AntiFox AI agents in AWS credential‑theft attacks

    Breaches & attacks · Exploited · since 11 Nov 2026

    AI