# Experts Expect 'Security Reckoning' As AI Tools Find And Exploit Software Bugs

DevFeed: [Experts Expect 'Security Reckoning' As AI Tools Find And Exploit Software Bugs](<https://devfeed.tech/articles/experts-expect-security-reckoning-as-ai-tools-find-and-exploit-software-bugs-111027.md>)

Original publisher: [Read original article](<https://it.slashdot.org/story/26/11/02/033200/experts-expect-security-reckoning-as-ai-tools-find-and-exploit-software-bugs>)

Author: EditorDavid

Published: 2026-11-02T03:04:00Z

Content type: news

Language: en

Sources: [Slashdot](<https://devfeed.tech/sources/slashdot.md>)

Topics: [Hacking](<https://devfeed.tech/topics/hacking.md>), [Security](<https://devfeed.tech/topics/security.md>), [AI Chat](<https://devfeed.tech/topics/ai-chat.md>), [Security research](<https://devfeed.tech/topics/security-research.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [ai-tools](<https://devfeed.tech/tags/ai-tools.md>), [artificial-intelligence](<https://devfeed.tech/tags/artificial-intelligence.md>), [attacks](<https://devfeed.tech/tags/attacks.md>), [banks](<https://devfeed.tech/tags/banks.md>), [bugs](<https://devfeed.tech/tags/bugs.md>), [chatbots](<https://devfeed.tech/tags/chatbots.md>), [china](<https://devfeed.tech/tags/china.md>), [claude](<https://devfeed.tech/tags/claude.md>), [crowdstrike](<https://devfeed.tech/tags/crowdstrike.md>), [cyber](<https://devfeed.tech/tags/cyber.md>), [cyberattacks](<https://devfeed.tech/tags/cyberattacks.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [data](<https://devfeed.tech/tags/data.md>), [deepseek](<https://devfeed.tech/tags/deepseek.md>), [experts](<https://devfeed.tech/tags/experts.md>), [exploit](<https://devfeed.tech/tags/exploit.md>), [hacking](<https://devfeed.tech/tags/hacking.md>), [security](<https://devfeed.tech/tags/security.md>), [software](<https://devfeed.tech/tags/software.md>)

## AI overview

CrowdStrike attributed attacks exposing financial data at nine or more South Korean banks to an alleged amateur who used AI chatbots. The excerpt says he had access to Anthropic's Claude, whose tools generally refuse illegal actions, and also used free Chinese models such as DeepSeek; CrowdStrike's Adam Meyers said the models are interchangeable. AI tools can help both seasoned hackers and novices, and CrowdStrike has tracked faster movement of attacks inside target networks. Experts expect risks to grow as tools for finding and exploiting software bugs spread. Horizon3's Snehal Antani says energy and water infrastructure should be tested immediately and comprehensively; he suggests government-funded remediation and a public-private partnership to speed incident response. The excerpt also reports that Cathedral researchers found and reported access to Anthropic internal messages and meeting transcripts, and Anthropic said it fixed the problems.

## Source excerpt

The Washington Post reports: Tens of thousands of South Koreans had their financial data exposed online in recent weeks after at least nine major banks there suffered cyberattacks that suggested a dark future for online security. One man, a 26-year-old living in southern China, was allegedly behind the attacks, according to an investigation by cybersecurity company CrowdStrike. Traces left online and failure to secure his own systems allowed investigators to piece together the man's name, age, location and what he allegedly did. The clues revealed that the devastating assault on some of Asia's most sophisticated financial institutions was the work of an amateur. The attacks were launched with help from a few artificial intelligence chatbots, CrowdStrike found, before asking one to help sell the stolen data online and draft a fake résumé touting cybersecurity skills... The hacker who broke into the South Korean banks had access to Anthropic's Claude, but because the U.S. firm's tools generally refuse to take illegal actions, free Chinese models were also used, including DeepSeek, CrowdStrike found. "The models are interchangeable," said Meyers, the CrowdStrike executive. The Post calls it "part of a wave of AI-enabled hacking that is advancing across the world, triggering alarm inside national governments as well as multinational companies." "Basically any pedestrian, non-hacker can take these frameworks and start leveraging them to go after different targets," said Adam Meyers, senior vice president of counter adversary operations at CrowdStrike. The company has tracked an increase in the speed with which cyberattacks can move once inside a target's networks, as seasoned hackers and rank amateurs alike get a boost from AI tools. "Anyone can be a super-hacker now," Meyers said... Many cyber experts still expect the security reckoning to intensify as AI tools that can find and exploit software bugs become more widely distributed and understood. [Last] Monday, The Post