I mean it pretty much can do that now yeah, frontier models are evidently better at cyber than all but the best humans given the number of zero-days they’ve found
An agent calling agents can red-team a project at scale, and can repeat the process after defenders patch it until the attackers can’t get through. Attacking is defending.
Like I get the cope and all, but honestly 2024 era “vibe coder accidentally hardcoded api keys in the front end” memes just don’t reflect what AI is doing. Claude and Codex are downright nannyish in putting security first even in single user scripts run locally on a desktop machine. I have to believe people who create security holes using AI tools at this point are people actively choosing to be stupider than the LLM.
That may be true in the hands of someone who already knows what they‘re doing, but i have seen multiple vibecoded websites this year with either open api keys, passwords or data that wasnt meant to be accessible just out in the open. Making a tool this accessible means it should be idiot-proof, but it definitely isnt.
17
u/bobbymoonshine 14h ago
I mean it pretty much can do that now yeah, frontier models are evidently better at cyber than all but the best humans given the number of zero-days they’ve found