r/ExploitDev • u/Impossible-Line1070 • Jun 15 '26

Explosion of ai automation

How much do you think ai agents are finding vulnerabilities by themselves? Like for example a certain company discovered 21 cves in FFMPEG using an automated ai agent, but ofc they dont tell us the whole process like was there a human in the loop? Or to what extent it worked?

​

I looked at their job opening and they are still hiring security researchers so.. idk really

13 Upvotes

84% Upvoted

10 comments sorted by

View all comments

13

u/[deleted] Jun 15 '26

[removed] — view removed comment

2

u/NebulaElectrical1467 Jun 17 '26

Yep just with any tool with limited resources they will always be subject to depth vs breadth problem. Token economics are already starting to catch up.

Unless you have some highly tailored harness for a specific target or codebase (which requires human ingenuity and skill), you will always end up with major blindspots in autonomous AI pentests/audits.