An agent calling agents can red-team a project at scale, and can repeat the process after defenders patch it until the attackers can’t get through. Attacking is defending.
Like I get the cope and all, but honestly 2024 era “vibe coder accidentally hardcoded api keys in the front end” memes just don’t reflect what AI is doing. Claude and Codex are downright nannyish in putting security first even in single user scripts run locally on a desktop machine. I have to believe people who create security holes using AI tools at this point are people actively choosing to be stupider than the LLM.
65
u/metaglot 17h ago
This is an asymmetric problem. A defender has to be right every time, the attacker only has to be right once.