400
Low-skilled attacker used Claude, Codex to breach 14 companies (www.helpnetsecurity.com)
submitted 3 months ago by to c/technology@lemmy.world
84 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 29 points 3 months ago (10 children)

Thing is, with the latest frontier models, the least skilled person can find a crack in the most secure company around, as long as they can string a few sentences together.

It isn’t about “bare minimum” anymore. All it takes is a single lapse in vigilance from a single employee, and they’re in… and the LLM doesn’t have to pause to figure out what to do next.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 10 child comments
    •
  • [–] 26 points 3 months ago (9 children)

    Pentesters have access to LLMs too

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 9 child comments
    •
  • [–] 37 points 3 months ago

    some hacker unleashes malicious AIs to the internet, breaking it apart cause AI keeps finding vulnerabilities in everything and break things faster than humans can fix

    corporates build corporate internet and the blackwall, which is AI to fight malicious AIs

    Gooooood morning Night City!

  • permalink
  • fedilink
  • source
  • parent
  • [–] 12 points 3 months ago* (6 children)

    Yeah, but an LLM's arms race isn't "doing the bare minimum in security", which is what the poster before was saying.

    This is a genuine concern, where whoever has access to the best/most recent/most expensive models can unleash chaos - I'm talking state-sponsored attacks, mega-corp espionage, bored billionaires,...

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 7 points 3 months ago (5 children)

    The people you listed were already doing this. The problem is Darrell, the guy who thinks Earth is flat, can also do this.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 7 points 3 months ago* (last edited 3 months ago) (4 children)

    Meh. When you're expecting to have to defend against an army battalion, how much of a thread is Darrell the flat-earther and his AR-15?

    Because if Darrell is doing damage, you've been conquered and didn't even noticed.

    Edit: in case you're not following the thread and feel an urge in your loins to come defend Darrell, do note that I'm not disparaging the issues a dimwit with AI can cause. I'm pointing out that other players will have even larger sticks than your friend Darrell.

    Case in point, Darrell will not have Claude Fable. Others will.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 0 points 3 months ago (1 child)

    In this analogy Darrell fires an ICBM, because everyone has access to a ton of those for $20/mo.

    The overall point is that doing (what used to be) the bare minimum is no longer even close to enough. To be considered adequate, you need super ironclad defense, because even low skilled attackers have access to very powerful weapons.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 2 points 3 months ago

    You said so yourself, everyone has a ton of those.

    Darrell is firing an ICBM at a place that is being hit with hypersonic hydrogen bombs all the time. Either he's hitting rubble, or a damn impressive defense that he's unlikely to break.

  • permalink
  • fedilink
  • source
  • parent