Everybody's Lost Their Minds

A veteran security engineer argues AI-driven vulnerability discovery is not making organizations safer because patching and basic security hygiene remain the real bottleneck.

The author, a long-time security practitioner, criticizes the industry's rush into AI-assisted vulnerability research, noting that Anthropic and OpenAI programs like Glasswing, Daybreak, Athena, and Akrites consumed millions of dollars of engineering time and surfaced thousands of vulnerabilities, only a fraction of which were reported upstream. He argues that finding vulnerabilities was never the bottleneck; patching, asset inventory, and attack surface management remain the true problems. The post also critiques AI hype, agentic workflows, anthropomorphic media coverage, and AI companies' calls for their own regulation.