Corporate security will be all over this when they realize that all it takes to get really bad malware or vulnerabilities inserted into your codebase is to have

Corporate security will be all over this when they realize that all it takes to get really bad malware or vulnerabilities inserted into your codebase is to have some “AI” that got trained nasty stuff insert something really bad into a critical application. I see the value in these companions in early training, but it could get really dangerous after that and it’s only a matter of time until some really nasty breach was caused by terrible code some AI came up with. This will be like Solar Winds 10x by letting the attackers right into the most sacred parts of your organization… writing the code that will make or break your company. But can’t we just filter the training set for bad things? No. The whole point of zero days is that bad folks know what they need to get inserted into your codebase before you (or companies training an AI) know it’s bad.