Security Experts Warn AI Coding Agents Put Nation-State Firmware Attacks in Script Kiddies' Hands
Cryptographer Matthew Green and fellow security researchers are warning about an HN post describing a developer who used Claude Code to continuously modify the firmware of every peripheral connected to his machine. Capability once reserved for nation-state actors is now achievable by ordinary users via AI coding agents, and the security industry is unprepared.
Confirmed
- Around August 29, an HN post described a developer using Claude Code to continuously modify all connected peripherals' firmware; Green said he found it alarming (m3, m5).
- Green reshared the case on August 31, noting such operations were historically nation-state grade and can now be done with scripts (m2).
- Security researcher moyix likewise expressed shock, noting AI agents can analyze firmware and ICS protected by "security through obscurity" at scale, potentially creating wormable threats (m4).
- Green separately noted that legacy OS and CPU architectures once deemed safe can be compromised by fully automated recon in about an hour, a threat class existing security models do not cover (m1).
Why it matters
- A step-change drop in attack cost: capabilities once requiring state-level resources are now within reach of script kiddies, greatly expanding the threat surface of firmware supply chains and embedded devices.
- Security-through-obscurity may collapse under AI-scale analysis, especially for critical infrastructure like ICS.
- Wormable threats combined with cheap automated agent reconnaissance leave current security models and industry readiness lagging behind.
2026-08-29 ~ 2026-08-31 · 5 related posts
Primary sources
- Security Expert Warns: AI Coding Agents Lowers Barrier for Firmware Malware — matthew_d_green ·
- LLMs Enable Firmware Hacking Once Reserved for Nation-States — moyix ·
- Security Researcher Warns: AI Rapidly Breaks Legacy Architecture Defenses — matthew_d_green ·
- [source] Security Expert Warns: AI Coding Agents Lowers Barrier for Firmware Malware — matthew_d_green · 2026-08-29
- AI coding tools lower firmware modification barrier to script kiddie level — valkenburgh · 2026-08-29
- [source] Security Researcher Warns: AI Rapidly Breaks Legacy Architecture Defenses — matthew_d_green · 2026-08-31
- [source] LLMs Enable Firmware Hacking Once Reserved for Nation-States — moyix · 2026-08-31
- Hacker News post shows using Claude Code to modify peripheral firmware, sparking security fears — matthew_d_green · 2026-08-31