Around Claude 4.8, AI because actually good at identifying code bugs. We're basically running bug hunter AI models 24/7 now, because malicious actors are almost certainly doing the same thing. The bad news is there is no end in sight, the CVE discovery rate is going to stay high.