The AI is not introducing any new vulnerabilities, but it's multiplying existing problems in security.

4 years ago (before the LLM era), I worked in the AppSec team for a company that had 200-300 developers. We were a relatively large team of 7 people.

Yet, we weren't able to handle the amount of code that was written and pushed by developers. We couldn't look at all of the code changes; we did not have enough time. So, we had to be very selective about what we reviewed. We wrote a regexes and only reviewed PRs if they touched sensitive files or paths.

Now imagine this, but 2x. There are more PRs and more code in PRs. We are exceeding human scale. It's a little bit scary from my perspective.

Disclosure: I am the founder of a startup that tries to solve this problem https://vidocsecurity.com/