"AI is giving attackers a huge advantage!"

[mustardfacial@infosec.exchange]

@troed @cR0w @jackryder

[troed@swecyb.com]

@Mustardfacial

Cognitive dissonance is a bitch.

@cR0w @jackryder

[badsamurai@infosec.exchange]

@cR0w 2026 Cybersecurity Priority List (according to LinkedIn)

AI
AI for Security
AI Security for AI
Agentic SOC
AI-SPM
CNAPP
CWPP
CSPM
CIEM
KSPM
DSPM
ASPM
.
.
.
Patch your shit
The fucking basics

[cr0w@infosec.exchange]

@badsamurai Is asset inventory covered in "the fucking basics" or is it further down?

[badsamurai@infosec.exchange]

@cR0w I almost added but I think I blacked out

[scottwilson@infosec.exchange]

@badsamurai @cR0w It’s absolutely mind-numbing to me, the orgs I encounter who don’t have a god damn asset inventory.

[cr0w@infosec.exchange]

@scottwilson @badsamurai

[mustardfacial@infosec.exchange]

@cR0w @badsamurai Asset inventory is covered in "the fucking basics" for system administration, let alone cybersecurity.

[nerdpr0f@infosec.exchange]

@scottwilson @badsamurai @cR0w I'll add another caveat: It's mindnumbing the number of orgs that want a pentest but don't have an inventory.

[cr0w@infosec.exchange]

@Mustardfacial @badsamurai Right but I was curious on the LinkedIn take on it.

[cr0w@infosec.exchange]

@nerdpr0f @scottwilson @badsamurai

[badsamurai@infosec.exchange]

@Mustardfacial @cR0w right. Forget security—how do orgs even do change management without a CMDB (which is unarguably smaller and more targeted than “asset”).

[krypt3ia@infosec.exchange]

@cR0w The new insider threat

[cr0w@infosec.exchange]

@krypt3ia A lot of us have gotten no traction in that framing of it though. :-(

[futuristicrobert@infosec.exchange]

@cR0w @krypt3ia

Therapist: Why do you think you have trust issues?

Me: I work in cybersecurity.

Therapist: But that doesn't-

Me: AI

Therapiest: .... Oh.....

[krypt3ia@infosec.exchange]

@cR0w Once upon a time, the insider threat was the employee… Now, it’s the AI employee.

[viss@mastodon.social]

@cR0w @krypt3ia im trying!

[krypt3ia@infosec.exchange]

@Viss @cR0w Like all things security, we will be ignored.

[cr0w@infosec.exchange]

@krypt3ia Now it's everybody. With zero trust to the rescue we're all the insider threat. Which means no one is. Security solved.

[cr0w@infosec.exchange]

@krypt3ia @Viss Unless there's an easy way for rich people to make more money off it.