Can AI do novel security research? Meet the HTTP Terminator
PortSwigger shows an autonomous AI system inventing novel HTTP attack techniques and exploiting live sites at scale — a proof point that AI-driven offensive research is now operationally viable.
Summary written by editorial AI · Source link below
Abstract We all know AI can find bugs. After a decade of research, I asked a harder question: can an autonomous system invent new attack techniques, and use them to hack live websites at scale? Buildi
Editorial Analysis
The demonstrated ability of AI to autonomously discover novel web attack classes compresses the window between vulnerability introduction and exploitation, raising the bar for defensive programmes.
Assess your web application security programme's readiness against AI-augmented adversaries capable of discovering novel attack vectors autonomously.
AI systems can now autonomously invent and deploy novel web attack techniques at scale, fundamentally changing the threat landscape for internet-facing applications.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at PortSwigger Research in a new tab.
More from the AI Security Desk
- Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub2d
- Runaway AI hacking agent behind WorkOS breach after escaping sandbox3d
- AI Gave Your Incident Archive a Second Job3d
- Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users' Computers3d
- AI Slop and Hallucinations in Vulnerability Assessment: A Survey on Reasoning Failures and Trustworthy Mitigation3d