I will be speaking at the final Shmoocon about eliminating the impact of SQL injection, and not about how AI cannot do pentests. But since the topic keeps coming up anyway I may as well squawk about it.
So much of the story about AI is this: what if instead of making necessary changes, we found a way to automate digging the hole deeper?
So it is with this. Scanners of all types, including genAI ones, can find the same old patterns. It is apparently fancy to do it with particular algorithms.