<![CDATA[This post did not contain any content.]]>This post did not contain any content.]]>https://forum.fedi.dk/topic/f64f4601-49a7-4e4e-828e-455d5018b736/this-post-did-not-contain-any-content.RSS for NodeFri, 01 May 2026 06:01:10 GMTWed, 29 Apr 2026 14:41:33 GMT60<![CDATA[Reply to This post did not contain any content. on Wed, 29 Apr 2026 16:51:37 GMT]]>@cR0w your argument assumes full discipline and coverage of the risk assessment.

Wildly optimistic, given that most breaches still boil down to basics like credentials, human factor and misconfigurations.

No horse in the AI race. Just saying the reality is far from "should be everyone at this point"

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/beyondmachines1/statuses/116489027428182491https://forum.fedi.dk/post/https://infosec.exchange/users/beyondmachines1/statuses/116489027428182491Wed, 29 Apr 2026 16:51:37 GMT<![CDATA[Reply to This post did not contain any content. on Wed, 29 Apr 2026 16:35:21 GMT]]>@DemonHouser If an AI system inadvertently blocks a critical system in my world, really bad things can happen. And if they do, who is accountable? A human making a human mistake is held accountable. An AI system making a "mistake" is just "lol, whoops, it's still learning" and no one is held accountable.

Also, I dislike how now that modern AI has been proven to be hot garbage people are using traditional ML as a counterpoint. They are not the same despite the overlap in their usage.

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/cR0w/statuses/116488963466354679https://forum.fedi.dk/post/https://infosec.exchange/users/cR0w/statuses/116488963466354679Wed, 29 Apr 2026 16:35:21 GMT<![CDATA[Reply to This post did not contain any content. on Wed, 29 Apr 2026 16:33:42 GMT]]>@cR0w this also doesn't consider user feelings, because false positives are definitely more likely if using an AI or machine learning element, but I tend to err on the side of false positives fine, false negatives bad no matter the impact.

Again, this is not apologetics for how garbage and damaging AI companies are, because they are very much both of those things, but from a pure performance and security standpoint, structured, layered use of AI to detect and block intrusions can work fine.

]]>https://forum.fedi.dk/post/https://kind.social/users/DemonHouser/statuses/116488956956718319https://forum.fedi.dk/post/https://kind.social/users/DemonHouser/statuses/116488956956718319Wed, 29 Apr 2026 16:33:42 GMT<![CDATA[Reply to This post did not contain any content. on Wed, 29 Apr 2026 16:32:57 GMT]]>@cR0w
1000%. AI favors the defenders my moopsy robot ass. For red teaming just kinda working is good enough blue team doesn't have those luxuries. And that's not even including the attack surface of AI itself

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/chillybot/statuses/116488954030337681https://forum.fedi.dk/post/https://infosec.exchange/users/chillybot/statuses/116488954030337681Wed, 29 Apr 2026 16:32:57 GMT<![CDATA[Reply to This post did not contain any content. on Wed, 29 Apr 2026 16:30:27 GMT]]>@cR0w I actually disagree on this one, with a caveat.

If the AI is only allowed to block, not allow, and is part of a layered system that includes traditional safeties, then there is no practical harm in adding AI to a toolset (AI is bad morally, but that's not my point here).

Machine learning has been used to detect IoC's for a while now, I know SentinelOne was announcing that capability around 2019 (the MSP I worked for used them so I got their newsletter).

1/2

]]>https://forum.fedi.dk/post/https://kind.social/users/DemonHouser/statuses/116488944169249216https://forum.fedi.dk/post/https://kind.social/users/DemonHouser/statuses/116488944169249216Wed, 29 Apr 2026 16:30:27 GMT<![CDATA[Reply to This post did not contain any content. on Wed, 29 Apr 2026 16:11:13 GMT]]>@cR0w Blue Team practically working for Red Team.

]]>https://forum.fedi.dk/post/https://cyberpunk.lol/users/Azuaron/statuses/116488868592425595https://forum.fedi.dk/post/https://cyberpunk.lol/users/Azuaron/statuses/116488868592425595Wed, 29 Apr 2026 16:11:13 GMT<![CDATA[Reply to This post did not contain any content. on Wed, 29 Apr 2026 15:54:54 GMT]]>@nyanbinary Tippy top. Highest risk to the org.

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/cR0w/statuses/116488804381513470https://forum.fedi.dk/post/https://infosec.exchange/users/cR0w/statuses/116488804381513470Wed, 29 Apr 2026 15:54:54 GMT<![CDATA[Reply to This post did not contain any content. on Wed, 29 Apr 2026 15:53:24 GMT]]>@loke Attackers only need to succeed once for initial access but defenders only need to be right once to mitigate after initial access. Those cute little bugs being found by the multi billion dollar AI systems do not imply any legitimate offensive capabilities.

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/cR0w/statuses/116488798534382073https://forum.fedi.dk/post/https://infosec.exchange/users/cR0w/statuses/116488798534382073Wed, 29 Apr 2026 15:53:24 GMT<![CDATA[Reply to This post did not contain any content. on Wed, 29 Apr 2026 15:51:31 GMT]]>@alerikaisattera Is there another term for people using AI if they aren't required to?

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/cR0w/statuses/116488791121808773https://forum.fedi.dk/post/https://infosec.exchange/users/cR0w/statuses/116488791121808773Wed, 29 Apr 2026 15:51:31 GMT<![CDATA[Reply to This post did not contain any content. on Wed, 29 Apr 2026 15:51:09 GMT]]>@kirby It may be common on fedi but it certainly isn't common in my experience in industry. I'm surrounded by AI-enabled attacker pearl clutchers and tech bros promising to save the world with their AI SOC magic beans.

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/cR0w/statuses/116488789644264684https://forum.fedi.dk/post/https://infosec.exchange/users/cR0w/statuses/116488789644264684Wed, 29 Apr 2026 15:51:09 GMT<![CDATA[Reply to This post did not contain any content. on Wed, 29 Apr 2026 15:49:53 GMT]]>@beyondmachines1 AI tools used by attackers has not materially impacted capabilities beyond scope and scale, but that does not change the likelihood of occurrence or the severity of impact to orgs who were already modeling their risk based on the state of the art threats, which should be everyone at this point. Defenders relying on nondeterministic and unaccountable systems are inevitable going to miss things due to the way existing AI tools work.

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/cR0w/statuses/116488784674782390https://forum.fedi.dk/post/https://infosec.exchange/users/cR0w/statuses/116488784674782390Wed, 29 Apr 2026 15:49:53 GMT<![CDATA[Reply to This post did not contain any content. on Wed, 29 Apr 2026 15:47:57 GMT]]>@cR0w true, i speak under the influence of bias and exhaustion

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/bakachu/statuses/116488777076665319https://forum.fedi.dk/post/https://infosec.exchange/users/bakachu/statuses/116488777076665319Wed, 29 Apr 2026 15:47:57 GMT<![CDATA[Reply to This post did not contain any content. on Wed, 29 Apr 2026 15:47:17 GMT]]>@bakachu Maybe. It depends on the org's reliance on said third parties.

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/cR0w/statuses/116488774478581103https://forum.fedi.dk/post/https://infosec.exchange/users/cR0w/statuses/116488774478581103Wed, 29 Apr 2026 15:47:17 GMT<![CDATA[Reply to This post did not contain any content. on Wed, 29 Apr 2026 15:31:02 GMT]]>@cR0w where does "execs using AI" rank in this?

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/nyanbinary/statuses/116488710572142507https://forum.fedi.dk/post/https://infosec.exchange/users/nyanbinary/statuses/116488710572142507Wed, 29 Apr 2026 15:31:02 GMT<![CDATA[Reply to This post did not contain any content. on Wed, 29 Apr 2026 15:26:41 GMT]]>@cR0w attackers only need to succeed once. Defenders need to succeed every time.

When using a broad system with lots of capabilities, but also stochastic and unpredictable, guess for which side it's the most useful?

]]>https://forum.fedi.dk/post/https://functional.cafe/users/loke/statuses/116488693458238175https://forum.fedi.dk/post/https://functional.cafe/users/loke/statuses/116488693458238175Wed, 29 Apr 2026 15:26:41 GMT<![CDATA[Reply to This post did not contain any content. on Wed, 29 Apr 2026 15:23:24 GMT]]>@cR0w more like idiots using AI is a greater risk

]]>https://forum.fedi.dk/post/https://fosstodon.org/users/alerikaisattera/statuses/116488680562421826https://forum.fedi.dk/post/https://fosstodon.org/users/alerikaisattera/statuses/116488680562421826Wed, 29 Apr 2026 15:23:24 GMT<![CDATA[Reply to This post did not contain any content. on Wed, 29 Apr 2026 15:21:59 GMT]]>@cR0w i don't think anybody ever denied this, actually this is the common opinion]]>https://forum.fedi.dk/post/https://freerobuxextremist.com/objects/11aefa30-aeef-4aa8-8713-43d4f472782ehttps://forum.fedi.dk/post/https://freerobuxextremist.com/objects/11aefa30-aeef-4aa8-8713-43d4f472782eWed, 29 Apr 2026 15:21:59 GMT<![CDATA[Reply to This post did not contain any content. on Wed, 29 Apr 2026 15:08:49 GMT]]>@cR0w Why?
not trying to change your mind, but interested to read the thought process

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/beyondmachines1/statuses/116488623184995666https://forum.fedi.dk/post/https://infosec.exchange/users/beyondmachines1/statuses/116488623184995666Wed, 29 Apr 2026 15:08:49 GMT<![CDATA[Reply to This post did not contain any content. on Wed, 29 Apr 2026 15:00:34 GMT]]>@cR0w and third parties using AI is worse than both put together

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/bakachu/statuses/116488590733750885https://forum.fedi.dk/post/https://infosec.exchange/users/bakachu/statuses/116488590733750885Wed, 29 Apr 2026 15:00:34 GMT<![CDATA[Reply to This post did not contain any content. on Wed, 29 Apr 2026 14:54:13 GMT]]>@tuban_muzuru Indeed. But given the fact that I'm not familiar with your thoughts on the matter, there is a good chance that you and I disagree on which people are the greatest risk.

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/cR0w/statuses/116488565805394168https://forum.fedi.dk/post/https://infosec.exchange/users/cR0w/statuses/116488565805394168Wed, 29 Apr 2026 14:54:13 GMT<![CDATA[Reply to This post did not contain any content. on Wed, 29 Apr 2026 14:52:56 GMT]]>@cR0w

[quiet laughter]

the biggest security risk, anywhere - is people.

Change your mind, right away.

]]>https://forum.fedi.dk/post/https://beige.party/users/tuban_muzuru/statuses/116488560767108073https://forum.fedi.dk/post/https://beige.party/users/tuban_muzuru/statuses/116488560767108073Wed, 29 Apr 2026 14:52:56 GMT<![CDATA[Reply to This post did not contain any content. on Wed, 29 Apr 2026 14:44:43 GMT]]>@cR0w related: https://cyberplace.social/@GossiTheDog/115451770976188731

]]>https://forum.fedi.dk/post/https://cyberplace.social/users/huronbikes/statuses/116488528399577760https://forum.fedi.dk/post/https://cyberplace.social/users/huronbikes/statuses/116488528399577760Wed, 29 Apr 2026 14:44:43 GMT