AI-generated code is still frequently failing security checks — with Claude and GPT-6 worst off

Progress is there, but it's mending a small part of a large wound.
Microsoft

From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths

Teams support impersonation led to remote access, malicious runtime execution, and Certificate Services abuse through ...