IN THE FIELD OF CYBERSECURITY, A DISTINCTION IS MADE BETWEEN THE "BLUE TEAM" TASK OF BUILDING A SECURE SYSTEM, AND THE "RED TEAM" TASK OF LOCATING VULNERABILITIES IN SUCH SYSTEMS

Summary from the TLDR AI newsletter

The blue team is necessary to create products, but the red team is just as essential due to the damage that can result from deploying insecure systems. The output of a blue team is only as strong as its weakest link - strong systems with weak components will be insecure while conveying a false sense of security. Contributions to red teams can often be additive - reports that contain both a serious and a more trivial vulnerability are more useful than reports that only contain a serious issue. AI may be better on the red team than the blue team - it may be better to get them to critique the work of human experts instead of directly replacing that output.