edskoudis

I'm relatively confident in predicting that currently, more major breaches are likely to be the result of AI use by the target, not the attacker. Ransomware actors have been consistently winning for over a decade. They've had so much time to perfect their tradecraft, and non-AI ransomware actors can now blast through entire networks in minutes. It is extremely unlikely that organizational security has, in 4 years, after decades of failure, matured enough that hackers now somehow need AI to win. What has likely happened, though, is that organizations have spent the last 4 years falling over themselves to shove AI into everything, negating longstanding security fundamentals. "only give a user/system the minimum possible access needed to do its job" has become "just give the AI access to everything and give everyone access to the AI". "use processes with well-defined and easily auditable input and output" has become "the AI correctly processes requests all the time, 60 percent of the time" "reduce attack surfaces" is now "every department should be vibe coding. It doesn't matter if you've never coded before and don't understand information security. Just make public-facing dashboards, it'll be fine." I'd say if anything, hackers aren't getting measurably more sophisticated, but the average organization's security posture has gotten exponentially worse.