PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Stronger Together: Embracing AI as a Force Multiplier

hackerone.com | research | #ai-security | #bug-bounty | #security-research | #ethical-hacking | #vulnerability-discovery | #hackerone | #human-ai-collaboration
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

AI works best as a force multiplier for security researchers—handling recon, code review and repetitive tasks—while humans add the creativity and judgment to uncover higher-impact vulnerabilities.
Published
Collected

Related coverage

blog · hackerone.com
Measuring The Fix: How We Evaluate Frontier Models on Remediation Quality
HackerOne tested frontier models on security fix quality and found the judge mattered more than the model. See how CTEM remediation earns engineer trust.
research · theori.io
The Frontier Isn’t the Model: Why ‘Good Enough’ Reasoning + Scaffolding Is More Important
Xint researchers argue vulnerability discovery owes less to frontier models than to scaffolding, comparing Mythos’s disclosed results with broadly available models and how to pick a model per task.
research · theori.io
Inside the brain of a hacking robot: Exploring traces | AI Cyber Challenge
Walkthroughs of agent trajectories from Theori’s autonomous hacking system: how LLM agents found bugs in SQLite, FreeRDP, Nginx and more during AIxCC practice runs, and what the logs reveal.
research · portswigger.net
Responsible denial of service with web cache poisoning
James Kettle shows how web cache poisoning can take down websites with a single request without collateral damage, earning bounties from Tesla and HackerOne along the way.
research · depthfirst.com
Introducing dfs-large1: A New Frontier for Cybersecurity
The release describes a concrete training and evaluation recipe for long-horizon AI code auditing, including repository-scale context, executable validation and explicit pressure against speculative findings.
research · depthfirst.com
21 Zero-Days in FFmpeg
depthfirst's autonomous agent discovered 21 zero-day vulnerabilities in FFmpeg and produced reproducible PoC inputs at a fraction of typical cost; several bugs had lain latent for 15-20 years.
Back