Kevin Beaumont
I am seriously thinking of starting a blog series about how Generative AI is ruining the cybersecurity industry.
Trend Micro put out this largely GenAI written story about Google being breached, which was complete nonsense (Trend Micro's entire marketing has turned into GenAI bollocks - there's so many examples of this).
Google are still, two months later, trying to fight the misinformation. Started by our own industry.
Kevin Beaumont
I literally spend my days now doing this:
1) Sign in
2) Read a panic about something
3) Look into it. It's GenAI nonsense
4) Defuse
5) Another GenAI nonsense begins
There's now multiple major vendors just making up threats using GenAI. And mainstream publications are running the stories, as the vendors front them with 'experts'. Microsoft's own threat intel team appears to have disappeared into an AI marketing cupboard, too.
Kevin Beaumont
It's absolutely the perfect time to get into being a threat actor by the way, as Generative AI is the perfect opportunity - not because of the security threat it poses, but it's caused everybody to lose their fuken marbles and become cats looking at an AI laser pointer.
We've automated a way for orgs to avoid doing any actual foundation security work, and also monetised it. We've gone from 'buy my magic box' to 'buy my magic box because AI CYBER WAR LOOK AT THE PEN WOOOOOOOOOOOOOOOOOO'
Kevin Beaumont
There's gotta be a counter weight, ideally where large amounts of people can point and laugh, as this stuff is reaching corporate execs worldwide. So I need to think of creative ways to dunk on it, impose cost.
RRB
@GossiTheDog Did you see the Easterly post where she said cybersecurity personnel are no longer needed, because GenAI?
System Adminihater
@GossiTheDog @rrb To be fair Jen Easterly has never worked a day in her life.
Doughnut Lollipop 【記録係】:blobfoxgooglymlem:
@GossiTheDog Meanwhile:
Ex-CISA head thinks AI might fix code so fast we won't need security teams
Ex-CISA head Jen Easterly claims AI could spell the end of the cybersecurity industry, as the sloppy software and vulnerabilities that criminals rely on will be tracked down faster than ever.
Speaking at AuditBoard's user conference in San Diego, Easterly said the threat landscape has never stopped evolving.
The proliferation of data, platforms, and devices meant "we've expanded the attack surface for cyber threat actors like China and Russia and Iran and North Korea and gangs of cybercriminals." Easterly said that if cybercrime was a country, it would be the third biggest in the world, just behind the US and China.
But ultimately, this is all the result of bad software, ridden with vulnerabilities.
Doughnut Lollipop 【記録係】:blobfoxgooglymlem:
GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.
All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.