The primary cyber threat from AI is not new attack vectors, but the speed at which models can discover existing vulnerabilities. The only effective defense is to use AI to find, prioritize, and patch these flaws faster than adversaries can exploit them.

The performance gap between frontier closed-source AI and open-source models provides a crucial window for cybersecurity. "White hat" hackers use the most advanced models to find vulnerabilities before "black hat" hackers can exploit them with widely available open-source tools.

Brockman argues that defenders currently have differential access to the most advanced AI models. They must use this temporary advantage to patch vulnerabilities before these powerful cyber-hacking capabilities become widespread and available to threat actors, effectively closing the window.

AI enables attackers to launch scalable, rapid attacks, overwhelming defenders who are left to manually monitor, validate, and patch vulnerabilities. This dramatically shifts the balance of power, creating a significant strategic disadvantage for cybersecurity teams in a way not seen before.

Defensive AI systems deployed in the real world must use approved, often older models. Meanwhile, attackers (or models in testing) can leverage the newest, most powerful frontier models, creating a fundamental and dangerous asymmetry where defense always lags behind offense.

Frontier AI models are dramatically reducing the time it takes for a newly discovered software vulnerability to be turned into a functional exploit. This acceleration means traditional, onerous patching cycles are no longer viable. Organizations must find new ways to patch systems almost immediately, as exploits can appear within hours of a vulnerability's announcement.

The same AI models that can exploit system vulnerabilities are also the most effective tools for identifying and fixing those weaknesses. This duality creates a policy paradox: restricting the technology to prevent its misuse as a weapon also prevents its use as a defensive shield, leaving systems vulnerable.

The same capabilities that make AI models powerful for writing code also make them exceptional at finding and exploiting vulnerabilities at a scale and speed no human "white hat" hacker can match.

Advanced AI models capable of finding complex code vulnerabilities are expected to be publicly available within months. This puts enterprises in an urgent race to find and patch their own security holes before malicious actors use the very same tools to exploit them.