Selfhosted

So far the only real vulnerabilities that Ai have spun up seem to be really obscure edge case privilege escalation bugs that have been around for ages but nobody discovered. They then get patched in days if not less. I would expect them to run out of low hanging fruit pretty soon.

Most of them can even be mitigated by preventing local access to a system.

There's tools to audit your network and systems. You can setup a SIEM like Wazuh. It'll tell you the same kind of stuff that have been good practice for a while and mitigate most of the ai assisted vulnerabilities.

Wow! That is a very intriguing question, and one that I have never considered before. Just spitballing here but you could possibly use trad apps like Lynis, Greenbone, Nikto, etc. These apps often produce rather verbose and sometimes cryptic output, i know Lynis sure does. So, you could use a prompt like:

'You are a security analyst. Review the following Nmap scan results. Identify services running outdated or potentially vulnerable versions, suggest likely CVEs, and prioritize findings by risk.'

Then use something like llama3.1:70b, mistral-nemo or deepseek-coder-v2, and pipe your security scans into your local AI. You could feed it your NGINX, docker configs, pFsense firewall rules in and ask the model to audit them.

IDK, that's a very good question I think. It'll be interesting to see what others have to comment.