@thecybersecguru@infosec.exchange
Post #4480047
2026-08-10 06:18 UTC
@Kugg@infosec.exchange Also, most AI generated bug reports are due to LLM Hallucinations. If AI development goes on like this then bug bounty, as we know, is dead. In a way, the whole software ecosystem is going to be dead anyways. AI generated code being audited by AI models which were trained on similar code. This will create a feedback loop and with each iteration, both coding and bug detection by AI will become worse. At some point of time in the near future it'll be something like AI will only be able to detect very few bugs. It'll be a predictable pattern. Then humans will be needed much more
Replies (1)
-
@Kugg@infosec.exchange 2026-08-10 06:28
@thecybersecguru@infosec.exchange i agree about slop grenade reports. AI deterioration might might occur under the assumption that AI is only ever trained on HackerOne reports. AI can already deliver accurately on most currently known bugclasses. Lets say our remediation time for entire bugclasses was 20 years before. This would imply that our generation have reached pension before creative hacking was required again. Until then a way to do novel security research with LLMs will have been found.