# AI Ends the Era of Security Through Obscurity AI exposes hidden vulnerabilities in critical systems worldwide. - **Source:** [www.theregister.com - Articles](https://brifing.si/source/2c34ea50-d341-4a10-925d-12c012a9ad10) - **Published:** 2026-09-13 - **Topic:** [Software & Engineering](https://brifing.si/c/engineering) - **Original article:** - **On Brifing:** https://brifing.si/s/31dee0ad-0e9f-478b-aee4-09b60aeb690e ## The Fall of Obscurity-Based Security Security through obscurity, the outdated practice of relying on hidden system architectures for protection, is now obsolete. AI tools are uncovering decades-old vulnerabilities in widely used systems, including open-source libraries running on 80% of web servers. FBI Cyber Division's Brett Leatherman confirms AI models are identifying significant flaws in long-trusted platforms. This shift exposes fundamental weaknesses in traditional security approaches that many organizations still depend on. ## Record-Breaking Vulnerability Disclosures Microsoft's recent Patch Tuesday addressed 974 CVEs (Common Vulnerabilities and Exposures), including obscure components like Telnet clients and Vista-era protocols. Trend Micro's Dustin Childs notes these are systems nobody discussed for years. The volume of discoveries creates massive patching backlogs for maintainers. AI doesn't just find current vulnerabilities—it rediscovers forgotten ones in deprecated systems that remain operational. This unprecedented discovery rate overwhelms traditional security teams' capacity to respond. ## AI's Dual Role in Cyber Threats While defenders struggle with patching, attackers use AI to reverse-engineer fixes within hours. In one case, espionage groups exploited Chromium vulnerabilities between patch release and user deployment. Google's John Hultquist warns AI eliminates the need for specialized knowledge to attack industrial systems. The technology democratizes hacking capabilities, allowing less skilled actors to target critical infrastructure. This creates asymmetric threats where defensive measures can't keep pace with offensive capabilities. ## Industrial Systems at Greatest Risk Operational Technology (OT) controlling power grids, water systems, and manufacturing plants faces particular danger. These systems rely on obscure proprietary protocols historically acting as security through obscurity. US agencies confirmed AI-generated scripts breached Siemens PLCs at critical facilities. Hultquist notes industrial systems were secure only because few understood them—a protection AI dismantles. The consequences could include disruptions to essential services millions depend on daily. ## The Patching Crisis Deepens Luta Security's Katie Moussouris highlights that finding vulnerabilities was never the main challenge—effective patching was. Studies show AI-generated patches fail over 50% of the time. Organizations lack resources to test and deploy fixes for the flood of new discoveries. Moussouris criticizes how bug bounty programs handle triage, noting AI exacerbates existing weaknesses in security postures. The technology illuminates problems faster than defenses can adapt, creating dangerous imbalances. ## Historical Context of Security Failures The concept of security through obscurity dates to early computing but persisted due to resource constraints. Many organizations adopted it not by choice but necessity, lacking budgets for robust security. Legacy systems accumulated vulnerabilities over decades while remaining operational. This created ticking time bombs now being detonated by AI's analytical power. The current crisis mirrors earlier transitions when new technologies disrupted established security paradigms. ## Economic and Operational Impacts The vulnerability deluge forces organizations to reassess security budgets and staffing. Critical infrastructure operators face impossible choices between system availability and security. Patching industrial systems often requires costly downtime. Meanwhile, insurers reevaluate cyber risk models as previously 'secure' systems prove vulnerable. These financial pressures compound technical challenges, potentially leaving systems exposed despite known vulnerabilities. ## The Path Forward for Cybersecurity Experts agree security must shift from obscurity to resilience. This requires designing systems assuming breaches will occur. Zero-trust architectures and continuous monitoring become essential. While AI threatens security today, it may also power future defenses through automated response systems. The transition demands unprecedented collaboration between vendors, researchers, and operators. Ultimately, eliminating false security assumptions may strengthen systems against evolving threats. ## Sources covering this story - https://www.theregister.com/security/2026/09/13/security-through-obscurity-is-dead-and-ai-delivered-the-fatal-blow/5296000 — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._