I’m scared about the future of security
Source: YouTube · Theo - t3․gg · published Apr 10, 2026 · 33:45
AI models are increasingly being used by security researchers to discover severe software vulnerabilities, leading to a massive spike in exploits and causing major concern among tech companies 0:04.
Key Takeaways:
• AI has become highly effective not just at writing code, but at identifying and exploiting security flaws within it 0:00.
• Researchers recently discovered a remote kernel Remote Code Execution (RCE) vulnerability using Claude in only about 35 prompts, highlighting a dangerously low barrier to entry for critical exploits 0:17.
• Many high-profile, viral exploits in popular frameworks like React and Next.js have been directly traced back to AI-assisted discovery 0:31.
• The situation is alarming enough that OpenAI has begun actively routing certain requests, signaling their awareness of AI's offensive cybersecurity capabilities 0:36.
As AI continues to lower the skill barrier for finding complex vulnerabilities, the tech industry faces a critical challenge in managing the dual-use nature of these powerful tools.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
We've all seen how good AI's gotten at writing code, but not all of us have seen how good it is at destroying it. Now, there's a real problem here. More and more security researchers and enthusiasts are realizing how powerful these models and tools are for finding vulnerabilities. And as a result, we've seen a massive spike in the vulnerabilities being found. We're at a point now where people are finding remote kernel rcees using Claude. And it took this developer about 35 or so prompts to get this exploit working. That's crazy. Do you understand how scary that is? All of the exploits we saw with React and Nex.js earlier were found with AI. A lot of the other exploits that are going viral are coming from AI. OpenAI is so scared that they're routing requests from 5.3 and 5.4 down to 5.2 if …