AI is actually a big reason why there are so many vulnerabilities over the past year and a half. People don't even know what their code bases look like anymore. It's really bad so sayeth my friends doing consulting.
A lot of companies cyber security posture is asking Claude to "find all security issues make no mistakes".
That’s not backed by data at all. We’re discovering more existing vulnerabilities.
I would expect code written by the latest frontier models with a "find all security issues make no mistakes" pass to be more secure than average human code written in the pre-AI era (not a high bar).
That's certainly one reason, but frontier LLMs are also really good at finding existing vulnerabilities in completely human-authored codebases.