#vulnslopalypse — Public Fediverse posts

Okay, here goes another AI Great Hot Take!1

AI will:

• increase the number of discovered vulnerabilities2
• decrease the quality of vulnerability reports3
• increase the number of vulnerabilities4

Welcome to the #vulnslopalypse, and please take note AI added nothing of value.

1 AI.G.H.T.!
2 https://it.slashdot.org/story/26/05/11/199232/anthropics-bug-hunting-mythos-was-greatest-marketing-stunt-ever-says-curl-creator

3 https://www.computerweekly.com/feature/Vulnerability-reports-Increase-in-quantity-decrease-in-quality

4 https://www.ioactive.com/the-security-gap-in-ai-generated-code/

#genAI #Mythos #Glasswing #ProjectGlasswing #Claude

Before the #vulnpocalypse, there will be the #vulnslopalypse.

As someone who has dealt with vulnerability reports in all shapes, forms and levels of veracity for at least a decade, I posit that's where we will hurt the most, for the longest time, and without reaching symmetry.

For the old farts: remember the burpsuite #bugbounty submissions? That, but at unprecedented scale, and these you can't easily filter out.

#vulnpocalypse #Mythos #infosec #vulnerability #vulnslopocalypse