research (arXiv:2611.13684 preprint, Nov 10, 2026; not peer reviewed; results are the authors' own)
BypassGym: researchers test whether AI agents can write loaders that get C2 shellcode past real EDR, and even small models often can
For defenders: assume commodity agents can iterate on loaders against your EDR; prioritize behavior-based detections (memory allocation plus execution patterns, unusual parent-child chains, C2 beaconing) over static signatures.
Caveats: small sample, lab settings and default EDR configurations; per-product results may not reflect tuned deployments.