Potentially. But also remember what they say about self-driving cars, that it'd make fewer and fewer mistakes than a real driver.

Waymos are in many cities and doing really well.

Yeah, when I'm building side projects that sometimes have more traction than anticipated I build them taking many shortcuts.

I've found LLM's add lots of standard protections to api endponts, or database constraints etc than I would do on a lazy Saturday.

Tesla drivers are involved in more accidents than drivers of any other brand.

Real drivers would also do fewer mistakes if they only drove in the limited and ideal conditions the self driving cars are limited to.

I tend to generally think the same as you, as I work in the same field. A long time ago I thought to myself, if AI adoption increases exponentially, there is a chance that the amount of security vulnerabilities introduced by it also increases at the same rate.

However, what we are maybe not considering enough is that general AI adoption could and almost certainly will affect the standards for cybersecurity as well. If everyone uses AI and everyone gets used to its quirks and mistakes and is also forgiving about someone else using it since they themselves use it too, the standards for robust and secure systems could decrease to adjust to that. Now, your services as a cybersecurity consultant are no longer in need as much, as whatever company would need them can easily point to all the other companies also caring less and not doing anything about the security issues introduced by the AI that everyone uses. The legal/regulation body would also have to adjust to this, as it is not possible to enforce certain standards if no one can adhere to them.

I don’t follow. Cybersecurity has always been about reducing the risk of costly cyber attacks. That hasn’t changed. It’s not like suddenly companies will stop caring that their software has been locked down by ransomware, or that their database leaked and now they have to pay a nine-figure fine. It’s not standards for standards’ sake (though it can feel that way). It’s loss prevention.

Sure, in the case of ransomware, phishing the ceo, etc. you are right. But for most other cases that AI would affect, it's not like companies would care if there weren't regulatory consequences forcing them to.

The MBA hears ya. The MBA don't care.