logo
I Read the Research on AI Hacking. The Bubble Is Finally Dying.
House of El: AI

246,226 views

7,598 likes

Cline Desktop: https://cline.gg/desktop-houseofel

ClinePass: https://cline.gg/clinepass-houseofel

AI is getting dramatically better at finding security flaws, but the systems around it are struggling to keep up. Bugs that sat unnoticed for years are now being uncovered in weeks, attackers are moving within hours, and even AI-generated fixes still need humans to check whether they quietly broke something else. I went through the latest research to see how close we actually are to letting AI defend our systems safely, and the answer is more complicated than either the doom or the hype suggests. The technology is moving fast. The real question is whether the security architecture around it can grow up fast enough.

☕ Support the channel on Ko-fi:

➡️ https://ko-fi.com/houseofel

📌 Chapters

00:00 Introduction

02:44 AI is finding the flaws

06:47 Can AI fix them too?

13:16 Keeping AI in check

21:39 AI IPOs and the risks

24:45 Discussion

📚 SOURCES & FURTHER READING

"On the Reliability of LLM-Based Vulnerability Patching Benchmarks" (Le, Shi, Xing, arXiv, Oct 2026)

https://arxiv.org/abs/2610.10150

"AI Agents May Always Fall for Prompt Injections" (Abdelnabi, Bagdasarian, arXiv, May 2026)

https://arxiv.org/abs/2605.17634

"Adaptive Evaluation of Out-of-Band Defenses Against Prompt Injection in LLM Agents" (Narisetty et al., arXiv, Jun 2026)

https://arxiv.org/abs/2606.26479

"From Training to Escalation" (Colmenero-Fernández, arXiv, Oct 2026)

https://arxiv.org/abs/2610.20437

"From Reactive Containment to Proactive Assurance" (Raftari, arXiv, Oct 2026)

https://arxiv.org/abs/2610.12463

"Cyber-Capable AI Agents" (Siddik, arXiv, Jul 2026)

https://arxiv.org/abs/2607.25379

"Frontier Models' Vulnerability Patches are Often F.L.A.W.E.D." (1Password, Aug 2026)

https://1password.com/blog/why-ai-generated-patches-still-require-human-review

"Vulnerability Discovery and Exploitation Trends in the AI Era" (Google, Sep 2026)

https://cloud.google.com/blog/topics/threat-intelligence/vulnerability-discovery-and-exploitation-trends-in-the-ai-era/

"Discovering cryptographic weaknesses with Claude" (Anthropic, Jul 2026)

https://www.anthropic.com/research/discovering-cryptographic-weaknesses

AI cryptanalysis research note (Cloud Security Alliance, Oct 2026)

https://labs.cloudsecurityalliance.org/research/csa-research-note-ai-cryptanalysis-assumption-horizon-202610/

"Some notes about Anthropic's new results" (Matthew Green, Jul 2026)

https://blog.cryptographyengineering.com/2026/07/29/some-notes-about-anthropics-new-results/

"PHP2Shell" (Calif, Oct 2026)

https://calif.io/php2shell/

"PHP2Shell: AI uncovers critical RCE vulnerabilities" (Wiz, Oct 2026)

https://www.wiz.io/blog/php2shell-php-rce

PHP2Shell exploitation before disclosure (AWS, Oct 2026)

https://aws.amazon.com/blogs/security/amazon-threat-intelligence-identifies-php2shell-exploitation-prior-to-public-disclosure-in-madpot/

October 2026 Security Updates (Microsoft, Oct 2026)

https://msrc.microsoft.com/update-guide/releaseNote/2026-Oct

"Investigating unintended model actions" (Anthropic, Oct 2026)

https://www.anthropic.com/research/investigating-unintended-model-actions

"Securing our frontier model training environment" (OpenAI, Oct 2026)

https://openai.com/index/securing-our-frontier-model-training-environment/

Anthropic S-1 filing (SEC, Oct 2026)

https://www.sec.gov/Archives/edgar/data/0002130357/000162828026067168/anthropicpbc-sx1.htm

Letter to Anthropic re: planned IPO (NYC Comptroller, Oct 2026)

https://comptroller.nyc.gov/reports/letter-to-anthropic-re-planned-initial-public-offering/

AI agent identity comments (NIST, 2026)

https://pages.nist.gov/nccoe-ai-identity/summary-of-comments.html

#AI #ArtificialIntelligence #Cybersecurity #AISecurity #OpenAI #Anthropic #AIAgents #AIResearch #TechIndustry #AIBubble #AIIPO #FutureOfAI #HouseofEl