--- title: Even if 90% of AI-discovered vulnerabilities are made... description: AI-assisted vulnerability hunting is shifting the attacker/defender asymmetry in a dangerous direction. Even if most AI-generated vulnerability reports are... canonical: https://daily.dev/posts/even-if-90-of-ai-discovered-vulnerabilities-are-made-up-it-s-still-terrifying-dagrwsogh twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Even if 90% of AI-discovered vulnerabilities are made up, it's still terrifying | daily.dev og:description: AI-assisted vulnerability hunting is shifting the attacker/defender asymmetry in a dangerous direction. Even if most AI-generated vulnerability reports are... og:url: https://daily.dev/posts/even-if-90-of-ai-discovered-vulnerabilities-are-made-up-it-s-still-terrifying-dagrwsogh og:image: https://api.daily.dev/og/posts/dAGRWSoGh.png og:image:alt: Even if 90% of AI-discovered vulnerabilities are made up, it's still terrifying og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Even if 90% of AI-discovered vulnerabilities are made up, it's still terrifying **[Sylvain Kerkour](https://daily.dev/sources/kerkour)** · 2 min read · 0 upvotes · 0 comments ## Summary AI-assisted vulnerability hunting is shifting the attacker/defender asymmetry in a dangerous direction. Even if most AI-generated vulnerability reports are hallucinated noise, skilled adversaries can use AI to turn expensive bug discovery into a cheaper triage process. Meanwhile, defenders must split their limited resources across triaging false positives, fixing real bugs, and shipping features. The piece highlights web browsers as a particularly alarming attack surface, noting that JIT compiler and type confusion bugs are especially hard to secure. The core argument: the sheer volume of AI-generated reports — even mostly fake — still tips the balance toward attackers. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How does AI change the attacker/defender asymmetry in vulnerability research? AI converts vulnerability discovery from an expensive, knowledge-intensive process into a cheaper triage process for skilled attackers. Defenders, by contrast, must simultaneously triage false positives, fix real bugs, and ship features — stretching resources thin. Even a high hallucination rate still floods maintainers with noise while attackers only need to find one real exploit. _Security engineers tracking how AI reshapes the threat landscape find the sharpest takes on daily.dev._ ## Similar posts on daily.dev - [Vulnerability Research Is Cooked — Quarrelsome](https://daily.dev/posts/vulnerability-research-is-cooked-quarrelsome-qbluzvaij) · Hacker News · 1 upvotes · 0 comments - [AI-powered bug hunting shakes up bounty industry — for better or worse](https://daily.dev/posts/ai-powered-bug-hunting-shakes-up-bounty-industry-for-better-or-worse-o9zthv0ix) · CSO Online · 1 upvotes · 0 comments - [AI Is Getting Scarily Good at Finding Security Vulnerabilities. Now What?](https://daily.dev/posts/ai-is-getting-scarily-good-at-finding-security-vulnerabilities-now-what--ee8iej5iv) · Medium · 0 upvotes · 0 comments --- Tags: [#ai](https://daily.dev/tags/ai), [#security](https://daily.dev/tags/security), [#vulnerability](https://daily.dev/tags/vulnerability), [#browsers](https://daily.dev/tags/browsers) [View this post on daily.dev](https://daily.dev/posts/even-if-90-of-ai-discovered-vulnerabilities-are-made-up-it-s-still-terrifying-dagrwsogh) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Even if 90% of AI-discovered vulnerabilities are made up, it's still terrifying","url":"https://daily.dev/posts/even-if-90-of-ai-discovered-vulnerabilities-are-made-up-it-s-still-terrifying-dagrwsogh","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/even-if-90-of-ai-discovered-vulnerabilities-are-made-up-it-s-still-terrifying-dagrwsogh"},"datePublished":"2026-08-11T08:56:27.361Z","dateModified":"2026-08-11T09:29:19.771Z","description":"AI-assisted vulnerability hunting is shifting the attacker/defender asymmetry in a dangerous direction. Even if most AI-generated vulnerability reports are...","image":"https://media.daily.dev/image/upload/s--foaA6JGU--/f_auto/v1722860399/public/Placeholder%2004","thumbnailUrl":"https://media.daily.dev/image/upload/s--foaA6JGU--/f_auto/v1722860399/public/Placeholder%2004","isAccessibleForFree":true,"articleSection":"Sylvain Kerkour","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Sylvain Kerkour","logo":"https://media.daily.dev/image/upload/s--3ngWt4Yp--/f_auto,q_auto/v1786438308/logos/kerkour?_a=BAMAMicg0","url":"https://daily.dev/sources/kerkour"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/even-if-90-of-ai-discovered-vulnerabilities-are-made-up-it-s-still-terrifying-dagrwsogh","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"ai,security,vulnerability,browsers","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Sylvain Kerkour","item":"https://daily.dev/sources/kerkour"},{"@type":"ListItem","position":3,"name":"Even if 90% of AI-discovered vulnerabilities are made up, it's still terrifying"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/even-if-90-of-ai-discovered-vulnerabilities-are-made-up-it-s-still-terrifying-dagrwsogh#faq","mainEntity":[{"@type":"Question","name":"How does AI change the attacker/defender asymmetry in vulnerability research?","acceptedAnswer":{"@type":"Answer","text":"AI converts vulnerability discovery from an expensive, knowledge-intensive process into a cheaper triage process for skilled attackers. Defenders, by contrast, must simultaneously triage false positives, fix real bugs, and ship features — stretching resources thin. Even a high hallucination rate still floods maintainers with noise while attackers only need to find one real exploit. Security engineers tracking how AI reshapes the threat landscape find the sharpest takes on daily.dev."}}]} ```