In 2024, a research team at Google DeepMind used an AI system called AlphaCode 2 to discover a zero-day vulnerability in the SQLite database. The system identified a buffer overflow that had been present in the codebase for years and had been missed by decades of human review and traditional fuzzing. My framing on AI vulnerability discovery: the human researcher is no longer the rate-limiting factor in finding bugs. The rate-limiting factor is now compute and clever prompting. For bug…
No comments:
Post a Comment