Software bugs are always a cat and mouse game with the mouse improving with time and the cat elevating its defenses. Now there comes a supermouse demanding supercat skills. But the massive difference now is that the defender has the exact same tools as the attacker.

Every SW developer must use AI to test the security in existing and future projects before deploying. I cannot believe it has not been done yet for all public facing software. And a system must be deemed insecure if it does not pass an LLM stress test. This should also become standardised and maybe included in OWASP.