"AI is giving attackers a huge advantage!"

[rootwyrm@weird.autos]

@Mustardfacial @cR0w @jackryder as a subscriber to multiversal theory, I sometimes joke:

Three dimensions over, scientists are debating whether it was ethically right to kill Hitler in the cradle.
Two dimensions over has a supersoldier that punches Nazis into other dimensions.
One dimension over, scientists are debating the ethics of exiling young HIitler to another dimension.
And over here we're going 'where the fuck are all these Hitlers coming from!?'

[troed@swecyb.com]

@Mustardfacial

I think the problem is with the "criti-hypes"* who believe they know better than everybody else (those "mediocres" of the world).

*) from https://pluralistic.net/2026/03/12/normal-technology/#bubble-exceptionalism

@cR0w @jackryder

[0x58@infosec.exchange]

@cR0w And even Western gov's are taking decisions using AI-powered chatbots that got trained with data up to the 90's it seems.

[cr0w@infosec.exchange]

@troed @Mustardfacial @jackryder Damn, I already blocked that domain.

[mustardfacial@infosec.exchange]

@troed @cR0w @jackryder

[troed@swecyb.com]

@Mustardfacial

Cognitive dissonance is a bitch.

@cR0w @jackryder

[badsamurai@infosec.exchange]

@cR0w 2026 Cybersecurity Priority List (according to LinkedIn)

AI
AI for Security
AI Security for AI
Agentic SOC
AI-SPM
CNAPP
CWPP
CSPM
CIEM
KSPM
DSPM
ASPM
.
.
.
Patch your shit
The fucking basics

[cr0w@infosec.exchange]

@badsamurai Is asset inventory covered in "the fucking basics" or is it further down?

[badsamurai@infosec.exchange]

@cR0w I almost added but I think I blacked out

[scottwilson@infosec.exchange]

@badsamurai @cR0w It’s absolutely mind-numbing to me, the orgs I encounter who don’t have a god damn asset inventory.

[cr0w@infosec.exchange]

@scottwilson @badsamurai

[mustardfacial@infosec.exchange]

@cR0w @badsamurai Asset inventory is covered in "the fucking basics" for system administration, let alone cybersecurity.

[nerdpr0f@infosec.exchange]

@scottwilson @badsamurai @cR0w I'll add another caveat: It's mindnumbing the number of orgs that want a pentest but don't have an inventory.

[cr0w@infosec.exchange]

@Mustardfacial @badsamurai Right but I was curious on the LinkedIn take on it.

[cr0w@infosec.exchange]

@nerdpr0f @scottwilson @badsamurai

[badsamurai@infosec.exchange]

@Mustardfacial @cR0w right. Forget security—how do orgs even do change management without a CMDB (which is unarguably smaller and more targeted than “asset”).

[krypt3ia@infosec.exchange]

@cR0w The new insider threat

[cr0w@infosec.exchange]

@krypt3ia A lot of us have gotten no traction in that framing of it though. :-(

[futuristicrobert@infosec.exchange]

@cR0w @krypt3ia

Therapist: Why do you think you have trust issues?

Me: I work in cybersecurity.

Therapist: But that doesn't-

Me: AI

Therapiest: .... Oh.....

[krypt3ia@infosec.exchange]

@cR0w Once upon a time, the insider threat was the employee… Now, it’s the AI employee.