A robust defensive strategy involves scanning with a variety of models and harnesses. Different combinations find different bugs. This diversity is crucial because attackers will inevitably use a wide range of tools, and relying on a single setup creates blind spots.

AI models are highly effective at finding security flaws faster than humans. While their defensive capabilities (e.g., auto-patching) are unreliable due to false positives, their offensive power creates urgency for enterprises to fix vulnerabilities, ultimately strengthening the cybersecurity ecosystem.

Leading AI labs are strategically releasing high-risk capabilities, like cybersecurity exploits, to trusted defenders before a general public release. This pattern, seen with Anthropic and OpenAI, aims to harden systems against potential misuse, with biosafety likely being the next frontier for this approach.

Advanced AI cyber tools like Anthropic's Mythos don't create new vulnerabilities; they excel at discovering existing, dormant bugs in human-written code. Their proliferation will catalyze a one-time, industry-wide upgrade cycle, ultimately hardening global infrastructure and leading to a more secure equilibrium between AI-powered offense and defense.

An AI model capable of executing complex cyberattacks is equally capable of identifying and fixing those same vulnerabilities. A government like China's will likely first deploy the model for defense—patching critical systems—before any public or commercial release, thus mitigating risk.

The plummeting cost of finding exploits via AI models means enterprises cannot simply patch vulnerabilities reactively. The necessary strategic shift is to build foundational security controls for each asset class, including a new, dedicated security layer specifically for the AI stack.

Following the OpenAI agent hack, Palo Alto Networks CEO Nikesh Arora warned that offense is inherently easier than defense in cybersecurity. He advised frontier AI labs to stop testing offensive agents in isolation and instead build and run defensive AI agents concurrently to act as a counterbalance, ensuring better control during red-teaming exercises.

The increasing use of AI by malicious actors is creating an exponentially expanding threat landscape. Human-only security teams cannot keep pace, creating a forcing function for organizations to adopt autonomous AI agents for defensive purposes just to survive.

CEO Nikesh Arora reveals his company tested the Mythos AI model, which dramatically accelerated the discovery of vulnerabilities in their own code. This proves AI's immense capability in cybersecurity for both defensive and offensive purposes, creating an arms race.