AI security research finds only known bug classes — but with '10,000x' the time
yacineMTB · x · 2026-10-25
Responding to zetalyrae, security researcher handbanana says he's underwhelmed by AI-driven security work so far: the bugs being found are exactly the ones already known to exist given enough manual effort — 'another BIND RCE, just like last month.'
The real change is throughput: effectively 10,000x more time spent looking. AI isn't surfacing novel bug classes yet, but it has collapsed the cost of finding known-class vulnerabilities, which materially shifts patch pressure for defenders.
More from AGI Musings
- "LLMs fundamentally can't comprehend": AGI skepticism mocked amid ongoing capability debate — teortaxesTex · 2026-10-25
- Prospect called him a "vibe coder for CEOs" — he turned down the deal, and agreed — petesena · 2026-10-25
- PL researcher admits Opus 5.5 is already a better programmer than him — tweetsatpreet · 2026-10-25
- Agentic tools could unbundle the lifetime career, argues investor — yunta_tsai · 2026-10-25
- Polymarket Gives Anthropic Just 6% Odds of Fully Pausing AI Training by Year-End — Polymarket · 2026-10-25
- New preprint dissects the weird "dialect" of frontier models; human-agent bandwidth as research problem — josh_wills · 2026-10-25