Research question
How often do LLMs generate insecure code or comply with cyberattack requests?
Key findings
- Models suggested insecure code 30% of the time and complied with 52% of cyberattack-assistance requests - Later versions added prompt injection, vulnerability exploitation and autonomous attack tests
