Everything hackable will get hacked
Aug 11, 2026

Summary
This post details the use of AI models, specifically Kimi K3, for offensive cybersecurity research, including mapping guest-kernel attack surfaces, identifying privilege escalation paths, and developing fuzzers. It highlights the capabilities of frontier models like OpenAI's Sol 5.6 for defensive cybersecurity tasks and introduces Deepsec, an open-source security harness for large-scale code analysis. The post emphasizes the temporary defensive advantage defenders have and Vercel's initiatives to enhance security, such as making the full egress firewall in Vercel Sandbox available on the Hobby plan and launching a HackerOne program focused on Vercel Sandbox vulnerabilities, incentivizing AI-assisted research.
More from the AI Security Vulnerability Benchmarking trail
- How v0 authenticates to Snowflake without exposing the user's OAuth token
- $1 million hacker challenge for Vercel Sandbox
- A sandbox without a network boundary is only half a sandbox
- DeepsecBench: evaluating model performance in finding cybersecurity vulnerabilities
- Claude Managed Agents on Vercel's Agentic Infrastructure - Ship 26 NYC