Cipher is Causal Security's autonomous security system. The company says it finds vulnerabilities, proves they are exploitable in a sandbox and hands over a fix.

Which advisories credit Causal Security?

CISA advisories ICSA-26-281-02 for Grid Protection Alliance openPDC and openHistorian, and ICSA-26-300-01 for EPICS Base, both published in October 2026.

Causal Security news

AI security company1 story

Causal Security is a security company that builds Cipher, an autonomous AI system that reviews code and cloud environments, tries to prove that the flaws it finds are exploitable and proposes fixes.

Vacuum chambers, magnets and cabling inside the curved storage ring tunnel of the Advanced Photon Source synchrotron. — Causal Security's Cipher AI found 4 EPICS Base flaws in under 4 hours, CISA advisory confirms

Cybersecurity27 Oct 2026, 06:00 UTC

CISA published advisory ICSA-26-300-01 on 27 October 2026 for four EPICS Base flaws, one rated 9.8. Causal Security says its AI Cipher found them in 3h49m.

Summary

CISA published advisory ICSA-26-300-01 on 27 October 2026 for four memory-safety vulnerabilities in EPICS Base, the open-source control software used at particle accelerators, telescopes and fusion experiments. One is Critical at CVSS 9.8. CISA credits Shubham Raj of Cipher and Causal Security. Causal Security says its autonomous AI system Cipher found all four in 3 hours and 49 minutes with no human intervention. The fix is EPICS Base 7.0.11.

About Causal Security

Causal Security is a security company that builds Cipher, an autonomous AI system that reviews code and cloud environments, tries to prove that the flaws it finds are exploitable and proposes fixes. Its researchers have reported vulnerabilities in industrial control and energy software that CISA published in its ICS advisories in 2026.

Reviewed 28 Oct 2026

Facts at a glance

Type: AI security review and vulnerability research
Product: Cipher, described by the company as an AI security engineer source
CISA credits in 2026: ICSA-26-281-02 (openPDC and openHistorian) and ICSA-26-300-01 (EPICS Base) source
EPICS Base findings: 4 vulnerabilities in 3 hours and 49 minutes, according to the company source
Researcher named by CISA: Shubham Raj source

Questions people ask

What is Cipher?: Cipher is Causal Security's autonomous security system. The company says it finds vulnerabilities, proves they are exploitable in a sandbox and hands over a fix.
Which advisories credit Causal Security?: CISA advisories ICSA-26-281-02 for Grid Protection Alliance openPDC and openHistorian, and ICSA-26-300-01 for EPICS Base, both published in October 2026.

Causal Security news

Every story about Causal Security

Causal Security's Cipher AI found 4 EPICS Base flaws in under 4 hours, CISA advisory confirms