Can AI Solve the Vulnerability Problem in Critical Infrastructure?

About this episode

The episode discusses the potential of generative AI to address vulnerability issues in critical infrastructure with insights from the winners of the AI Cybersecurity Challenge.

Generative AI is poised to revolutionize vulnerability discovery in critical infrastructure, but will it actually fix the problem, or just shift the burden? The recent AI Cybersecurity Challenge (AIxCC), a two-year competition sponsored by the US Defense Advanced Research Projects Agency (DARPA) and Advanced Research Projects Agency for Health (ARPA-H), crowned winners whose AI systems autonomously discovered and patched zero-day flaws in real-world code. Now, with models potentially going open-source, the implications for defenders, attackers and policymakers are seismic. In this episode, we sat down with Taesoo Kim, the leader of Team Atlanta, the AIxCC winning team, and Andrew Carney, program manager for the AIxCC at DARPA and ARPA-H. In the interview (13.56), they discuss why the commercialization of GenAI-powered vulnerability scanning tools could be just around the corner and how "self-healing infrastructure" might soon become a reality.

People in this episode

Guests: Taesoo Kim, Andrew Carney

Topics covered

• AI in cybersecurity
• vulnerability discovery
• critical infrastructure
• zero-day flaws
• self-healing infrastructure
• commercialization of AI tools

Keywords

• generative AI
• vulnerability scanning
• AI Cybersecurity Challenge
• zero-day vulnerabilities
• critical infrastructure
• self-healing systems

Mentioned in this episode

Organizations: US Defense Advanced Research Projects Agency, Advanced Research Projects Agency for Health

More episodes of Infosecurity Magazine Podcast

• Infosecurity Europe 2026: A Guide to Getting the Most Out of the Event · May 18, 2026 · 29 min
• Inside the Code War: Defending Against Nation-State Cyber Threats · April 20, 2026 · 38 min
• Exclusive Interview with OpenClaw’s Security Advisor · March 13, 2026 · 59 min
• Ransomware Dethroned by Cyber Fraud: Insights from the WEF’s Cybersecurity Outlook 2026 · February 11, 2026 · 31 min
• How 2025 Shaped the Future of Cybersecurity With Rebecca Taylor & Will Thomas · December 9, 2025 · 34 min
• Beyond Bug Bounties: How Private Researchers Are Taking Down Ransomware Operations · November 4, 2025 · 34 min