Danbooru was shut down for a week after an attacker used an AI-discovered XSS worm in a malicious Flash post to steal viewer IPs and hijack accounts during a 6-minute exposure window. The team patched the exploit, fortified security against further AI-driven attacks, and used the downtime for long-delayed server upgrades.
Background
Danbooru is a large anime-focused imageboard that has faced occasional security challenges due to user-generated media uploads. The incident highlights a growing trend of attackers leveraging large language models to discover web vulnerabilities.
- Source
- Lobsters
- Published
- Nov 12, 2026 at 12:58 AM
- Score
- 5.0 / 10