Post B58nUIHw1bC3paa3A8 by cR0w@infosec.exchange
 (DIR) More posts by cR0w@infosec.exchange
 (DIR) Post #B57ryA7BBQq5pN5U1Y by Sempf@infosec.exchange
       0 likes, 0 repeats
       
       For those getting questions about Glasswing from their executives, give them this article. https://tryaether.ai/blog/anthropic-glasswing-frontier-attack
       
 (DIR) Post #B57ryAL0M1tkWFYWZc by cR0w@infosec.exchange
       0 likes, 0 repeats
       
       @Sempf Yeah, that's a no for me. My risk models remain unchanged.He is right that AI gives us the catalyst and the tools.
       
 (DIR) Post #B57ryAX3dDXV7dC9MO by Sempf@infosec.exchange
       0 likes, 0 repeats
       
       @cR0w When you say your risk models remain unchanged, does that mean you are not receiving pressure from management to change them due to Glass Wing, or that you already have and you're not changing them back?
       
 (DIR) Post #B57ryAfD8u3rWv0f4K by darkuncle@infosec.exchange
       0 likes, 0 repeats
       
       @Sempf @cR0w  "We have a different question. When did zero days become the threat you were supposed to be worried about?"I mean, yeah, but also just because somebody is doing the basics poorly does not mean that advanced techniques are not *also* a threat. Many threats simultaneously! And some of them just became more risky and easier for attackers to leverage ...
       
 (DIR) Post #B57ryAryNSGmAUyqxc by cR0w@infosec.exchange
       1 likes, 0 repeats
       
       @darkuncle @Sempf Easier for attackers means a potentially higher likelihood of occurrence, but it does not change the severity of impact. And while the likelihood does theoretically impact the risk score, for at least some orgs, it's minimal to no change when your adversaries are at the top of the field already. The rising tide of AI may be lifting all attackers' boats, but the high water mark remains the same, despite the industry continuously claiming a tsunami is coming. I just don't see it.
       
 (DIR) Post #B58nUHpDkME0OX97PE by Sempf@infosec.exchange
       0 likes, 0 repeats
       
       @cR0w @darkuncle You should start a blog. Oh, wait.
       
 (DIR) Post #B58nUIHw1bC3paa3A8 by cR0w@infosec.exchange
       1 likes, 0 repeats
       
       @Sempf @darkuncle