AI found 99 vulnerabilities in network code in 90 hours
Forescout says the same work by hand needs nine months, and the AI cost only $1,200 to $2,300.
Security firm Forescout said on Thursday that its AI tool found 99 vulnerabilities (weak points in code) in 90 hours. The tool used Claude models to check 10 network stacks, which are the network code in street lights and safety systems. Forescout estimates that a team needs nine months to do the same work by hand.
How it works
Forescout built a harness, which is control software that directs the AI models. It used rules for code patterns. The tool found 66 new vulnerabilities.
The numbers
Forescout told the maintainers about 54 of the 66 new ones, and 24 are fixed. The tests cost $1,200 to $2,300. Forescout says this is about 100 times less than the pay of a senior researcher.
What is not known
Forescout says the tool misses logic bugs and found some by accident. The developer of Ethernut did not reply. Vulnerabilities in an unsupported wireless access point will get no patch.
Insight: Cheap discovery leaves unsupported devices without defense
Forescout paid $1,200 to $2,300 for 99 vulnerabilities. Anyday Security says its AI made a browser exploit in minutes for less than one dollar. The UK government says a central tool cut its repair time from 50 days to 8. To find vulnerabilities is cheap for attackers too. Repair speed decides, and unsupported devices cannot be repaired.
Sources
Posted
