Auditing in the age of (good enough) AI

Security firms are using AI agents not just for code review, but to build custom development tools that improve security audits. A security team used AI agents to build an LSP server (a tool that provides code editing features like autocomplete and navigation), a decompiler (a program that translates low-level code into more readable form), and formal verification tools (mathematical proofs of correctness) for the Miden VM, a new blockchain system, which helped them find serious bugs including an unvalidated input that could let attackers forge cryptographic signatures.