Specialized, yes, but generative AI is an entirely different subject from cybersecurity applications. These are not general purpose models... they're specifically trained and tasked to do cyber attacks.
-
Hardware vulnerabilities. There a millions of devices that an AI could easily cross reference against a database of known hardware vulnerabilities. Consider the Windows 10 or Android 12 situation. IOT devices that are no longer being updated. AI could mass target devices with any known vulnerability.
-
Brute forcing passwords and cross referencing libraries of credentials. Basically what scammers currently do but x1000000. Weak passwords below 12-16 character lengths may become obsolete.
-
Scalability. 1 AI agent could be the equivalent of 100 human cyber security agents. Meanwhile the minimum skill level to activate these AI agents will be far, far, below the skill requirements of becoming a cyber security professional.
AI is better at computer stuff just like humans are better at human stuff.