AI Hackers Are Faster Than Your Pen Test — Eli Cohen, Snyk
Attackers use AI too, and the fastest AI attack he cites took four minutes.
A pen test once or twice a year can't keep up. Eli Cohen of Snyk, co-founder of the runtime security company Helios, explains why security has to go on the offense in an agent-first world. Developers now ship far more code, much of it insecure, while attackers use frontier models to chain small vulnerabilities into critical ones in minutes. He walks through why traditional tools fall short: static scanning misses runtime issues, dynamic testing misses business logic, and human pen tests are expensive and happen only a few times a year. Then he describes continuous offensive security: AI pen testing on every code change, agent red teaming, and a team of agents (orchestrator, recon, vulnerability hunters, an exploit-validating judge, remediation and reporting), fed with context from other scanners. He ends with four questions to ask any AI pen testing vendor.
The text is the source's own description of its publication. The content belongs to AI Engineer.
More from AI Engineer
Inside Arca's Long-Horizon Agents That Run the Business - Aman Singh, Arca
AI Engineer 23 Oct
Real AI Agent Attacks and What Would Have Stopped Them — Andrey Rybka, Bloomberg
AI Engineer 23 Oct
Outside of tech there has been no financial payoff to US companies for using AI, now viewed as a margin-hurting cost center, as VC-backed firms burn more tokens
Techmeme 4 h ago
Source: Replit recently moved most AI spend from Anthropic to OpenAI, which gave 30%+ off in a deal worth $100M+/year, after Anthropic discontinued its discount
Techmeme 6 h ago