
When Models Turn Brutal
ZeroShield - Securing AI Infrastructure (@zeroshieldai) on X
A vendor thread from ZeroShieldAI argues the patch window has collapsed because AI models can now find and weaponize vulnerabilities faster than defenders can fix them. It cites ZeroDayBench (success jumping from ~13% on blind zero-days to 78% once patch location is known), Aikido Security's benchmark where DeepSeek V4 Pro found 28 of 32 recent CVEs for about 98 dollars per run, a Unit 42 finding that 92% of AI-discovered flaws are logic bugs fuzzers miss, and a Hugging Face stat that 16 of the top 300 models advertise removed safety guardrails with 16.8M downloads. It promotes an attached 6-page case study and lists five defender recommendations: treat disclosure as exploit day, maintain SBOM/AIBOM, inventory models and agents, gate agent tool calls with policy, and red-team code and AI apps.
Technologies named here
- ZeroDayBench
- Infusion pumps
- Substations
- Aikido benchmark
- DeepSeek V4 Pro
- Water treatment systems
- Vehicles
- Unit 42 report
- 3,915 open-source projects
- Hugging Face
- DeepSeek
- Aikido Security
- SBOM
- Unit 42
Techniques named here
- Patch-derived exploit generation
- AI-assisted autonomous vulnerability discovery
- AI-driven CVE discovery via LLM
- AI discovery of logic bugs
- Safeguard removal from open-weight models
Related in AI Security
