tenobrus: even frontier labs with unlimited budgets can't secure their systems against their own models

AaronBergman18 · x · 2026-10-22

Security researcher tenobrus pushes back on the common take that "AI cyberoffence will be countered by AI cyberdefence, since there aren't infinite bugs in code."

His argument: frontier labs themselves — with infinite token budgets, no refusals, and models beyond anything publicly available — cannot secure their own systems against these models, not even against sustained malicious attack, but merely internal eval runs. The reason is that the attack surface is very large. While things may eventually converge on a lean, universal stack, he expects the situation to get much worse before it gets better.

Original post →

More from AGI Musings

AGI Musings channel →