What are the key takeaways from “Can AI find every vulnerability? The new cybersecurity arms race | Jon Green” on Technology Now?
AI is turning cybersecurity into an automated arms race
Insights from the Technology Now episode “Can AI find every vulnerability? The new cybersecurity arms race | Jon Green”, published August 6, 2026.
Frequently asked questions about “Can AI find every vulnerability? The new cybersecurity arms race | Jon Green”
What is "Can AI find every vulnerability? The new cybersecurity arms race | Jon Green" about?
In "Can AI find every vulnerability? The new cybersecurity arms race | Jon Green" (Technology Now, August 2026), generative AI is fundamentally changing software security by enabling rapid, automated vulnerability discovery and exploitation. While this allows developers to patch flaws before release, it also empowers…
What does "Project Glasswing" mean in "Can AI find every vulnerability? The new cybersecurity arms race | Jon Green"?
In "Can AI find every vulnerability? The new cybersecurity arms race | Jon Green", This project leverages frontier AI models to perform automated security analysis on source code. It represents a proactive shift in security, moving from reactive patching to preventative vulnerability management.
What does "Chaining Vulnerabilities" mean in "Can AI find every vulnerability? The new cybersecurity arms race | Jon Green"?
In "Can AI find every vulnerability? The new cybersecurity arms race | Jon Green", AI models are uniquely capable of identifying connections between disparate parts of a codebase, allowing them to link minor bugs that humans might ignore. This makes even 'low' severity vulnerabilities dangerous when viewed through an…
What does "Vibe Coding" mean in "Can AI find every vulnerability? The new cybersecurity arms race | Jon Green"?
In "Can AI find every vulnerability? The new cybersecurity arms race | Jon Green", While this increases productivity, it risks introducing new, unforeseen vulnerabilities into software. It highlights the tension between the speed of AI-driven development and the necessity of secure engineering practices.
What is this episode about?
Generative AI is fundamentally changing software security by enabling rapid, automated vulnerability discovery and exploitation. While this allows developers to patch flaws before release, it also empowers attackers to chain minor vulnerabilities into critical exploits, forcing a shift toward more frequent, automated patching cycles.
What are the key takeaways?
AI models are now capable of performing sophisticated 'pen testing' by analyzing source code to identify and chain vulnerabilities. — This accelerates the discovery of security flaws but also lowers the barrier for attackers to find them.
Traditional CVSS severity scores are becoming less reliable as AI can combine multiple 'low' severity bugs into a 'critical' exploit. — Security teams can no longer prioritize patches based solely on individual bug severity.
The industry is entering an era where 'in-service' software updates and high-frequency patching will become the standard for network hardware. — Organizations must architect for fault tolerance to survive constant maintenance windows.
What concepts are explained?
Project Glasswing: This project leverages frontier AI models to perform automated security analysis on source code. It represents a proactive shift in security, moving from reactive patching to preventative vulnerability management.
Chaining Vulnerabilities: AI models are uniquely capable of identifying connections between disparate parts of a codebase, allowing them to link minor bugs that humans might ignore. This makes even 'low' severity vulnerabilities dangerous when viewed through an AI-powered lens.
Vibe Coding: While this increases productivity, it risks introducing new, unforeseen vulnerabilities into software. It highlights the tension between the speed of AI-driven development and the necessity of secure engineering practices.
Agentic Loop: By putting AI into a loop, the system can test its own findings in real-time, significantly accelerating the discovery and validation of security vulnerabilities.
Who should listen to this episode?
IT infrastructure managers, software engineers, and cybersecurity professionals.
