AIs Hacking Websites

A short research announcement asserts that frontier LLM agents (specifically GPT-4) can autonomously compromise websites—performing tasks such as blind database schema extraction and SQL injection without prior knowledge or human feedback—and can discover vulnerabilities in live targets, while current open-source models cannot; the work raises broader security concerns about deploying such capable agents.