Xiaofei Xie

LLMs can now automatically generate property-based tests for Android apps, uncovering 25 previously unknown bugs that eluded existing functional testing techniques.

Automatically exploiting web application vulnerabilities is now significantly more feasible, with AutoEG achieving over 80% success where previous methods struggled to reach 33%.

LLM-powered pentesting agents fail not because of model limitations, but because they can't estimate task difficulty, leading to wasted effort and premature context exhaustion.