400
Low-skilled attacker used Claude, Codex to breach 14 companies (www.helpnetsecurity.com)
submitted 3 months ago by to c/technology@lemmy.world
85 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 18 points 3 months ago (6 children)

Cybersecurity is actually one of the few fields that can benefit from AI. There are companies like Horizon3 who are using it alongside their other threat models to do continuous pen testing.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] -2 points 3 months ago (3 children)

    Gonna take a guess here that what is used in cybersecurity is not LLMs but one of the more useful machine learning applications. Just a nitpick cause today "ai" and "LLM" are sadly synonymous.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 10 points 3 months ago (2 children)

    No, LLMs can definitely be useful for cyber too. It's the whole reason the US government banned Claude Fable for export.

    An LLM can not just try existing exploits like a script kiddy, but with iteration it can try variations and if you know what runs on the server, inspect the source for potential exploits.

    They can also look at your setup and say what issues they see (reverse proxy config, etc).

    Doesn't replace an expert, but can be useful for a first pass before you get the highly paid people involved.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 4 points 3 months ago (1 child)

    You know what, fair enough. I don't know enough about that particular one.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 2 months ago

    I do. I reverse engineered some proprietary software using an agent. A pro could've maybe done it faster, but I did it AFK with little knowledge about reverse engineering.

    An agent could similarly try tons of attacks against online targets. Fairly sure some are doing it.

  • permalink
  • fedilink
  • source
  • parent