Tzadik, a security researcher at cybersecurity firm Wiz, assumed that the AI had made a mistake.
Unbeknownst to Wiz’s team, researchers at another cybersecurity firm, Calif—working with OpenAI—had used AI to find a related flaw.
The episode offers a glimpse into a new phase in cybersecurity in which AI helps defenders find vulnerabilities while giving them less time to fix them.
After the agent helped Wiz uncover the PHP vulnerability, it still couldn’t describe how the bug worked, Tzadik says.
He and colleagues spent days untangling the cause of a bug and eventually reproducing it.