Thing is, with the latest frontier models, the least skilled person can find a crack in the most secure company around, as long as they can string a few sentences together.

It isn’t about “bare minimum” anymore. All it takes is a single lapse in vigilance from a single employee, and they’re in… and the LLM doesn’t have to pause to figure out what to do next.

At least 14. *screams until hoarse in industrial cybersecurity researcher*

It is significant because a random teenager can't google "download exploits" and have them available 5mins later.

Powerful AI models and agents though are on your fingertips without you even asking.

Sure, people can buy guns. But what if every person could materialize a chainsaw instead regardless of their skill, maturity, age, or criminal record? 🤔

I also work in security.

My company (which can damn well afford the costs) 100% REFUSES to leverage AI in any meaningful fashion. The CISO himself wrote the most braindead email to the CIO saying basically that AI isn't a threat and then showed it to the rest of us like he's proud of it.

I tried to push some adoption of AI based tools to help detect our own weaknesses and do some basic cleanup work. Nope. Stonewalled. I argued that every attacker is stealing accounts and burning tokens to tear us to shreds using every possible tools they can steal or even buy. We use Copilot.

Blank stares and crickets. We just keep managing our shit in spreadsheets that some dumbass emails as attachments and wonders why everyone has a different version of some useless thing.

At least they're paying me well. When they collapse in a little while, I suppose I won't be too surprised.

A poor IT department is working overtime with limited funds for staff trying to fix stuff while bosses breathing down their necks.

Every time i go on holiday something breaks. It reminds my employer of how many fires I deal with he never notices

Make the hidden work seen

LLaMers

Huh?

I'm nominating you for best spoiler reveal of the month.

That’s the code for my luggage.

It probably was before the current assholes decided Grok needs access.

The reason things haven't fallen apart is because there's a lot of devs working a lot more than they used to making sure they're patching vulnerabilities. Last year if you asked me what portion of my time was spent updating dependencies and responding to reports of vulnerabilities I'd say like 5-10%, this year that's easily more like 30%

I'm sure not every company is doing this, but depending on the sensitivity of the data the company is holding I'd imagine you'd see similar patterns elsewhere

Fair I agree it's overhyped. But to be honest the amount I think it's overhyped continues to decline as its capabilities continue to advance. And we're at a point now where it is clearly useful for many tasks, even if it's not appropriate for everything.