If you're focused on "defending against #Mythos", you're worried about the wrong problem.
If you're focused on "protecting against #AI hackers", you're worried about the wrong problem.
As described recently by #infosec expert and IANS Faculty member Davi Ottenheimer:
"Your patching SLA, #EDR coverage, network segmentation, #MFA enforcement, and asset inventory are still the things that determine your exposure. In particular, using AI to scan code for flaws internally is a leveling move, and using AI to remediate code by rearchitecting it away from flaws is an uplift. An AI-assisted offensive tool does not change that calculus because it moves the attacker marginally closer to the ceiling of what a competent human red team already does against targets that have no defenses anyway."
And I absolutely *love* this quote:
"[The Mythos paper] is the worst form of FUD: anchor to something true, then extend the credibility to something unproven. The emergency is built on the myth, and some of the most credentialed people in the industry just co-signed it without checking the facts."
How about, let's work on *getting the basics right*.
References:<li><a href="https://www.flyingpenguin.com/the-boy-that-cried-mythos-verification-is-collapsing-trust-in-anthropic/"; target="_blank" rel="nofollow noopener" translate="no"><span class="invisible">https://www.</span><span class="ellipsis">flyingpenguin.com/the-boy-that</span><span class="invisible">-cried-mythos-verification-is-collapsing-trust-in-anthropic/</span></a></li><li><a href="https://www.iansresearch.com/our-faculty/faculty/detail/davi-ottenheimer"; target="_blank" rel="nofollow noopener" translate="no"><span class="invisible">https://www.</span><span class="ellipsis">iansresearch.com/our-faculty/f</span><span class="invisible">aculty/detail/davi-ottenheimer</span></a></li>
