[adrian_b]

This only indicates that an AI coding agent was used to write an exploit.

No such circumstantial evidence can prove that an AI model has been used to find the bug.

Of course, it is quite likely that an AI model was used to speed up the search for bugs, but this can never be proven as long as you see only the code used to exploit the bug.

[trollbridge]

It’s analogous to saying “Hackers used an IDE to write an exploit.”

[batshit_beaver]

Oh no, we should create a fear mongering blog post and delay the latest IDE version until we have better security in place!

[jeltz]

This is more like if JetBrains wrote a blog post about the dangers of IDEs.

[otherme123]

They don't say "proven", they say "we have high confidence that the actor likely leveraged an A.I". Do you find that assert too different from your "it is quite likely that an AI model was used to speed up the search for bugs"?

[crazygringo]

Exactly. Making the discovery and then exploiting it are two totally separate things.

The latter in no way implies the former. But it sure does make good press.