"AI is giving attackers a huge advantage!"

[cr0w@infosec.exchange]

@badsamurai Is asset inventory covered in "the fucking basics" or is it further down?

[badsamurai@infosec.exchange]

@cR0w I almost added but I think I blacked out

[scottwilson@infosec.exchange]

@badsamurai @cR0w It’s absolutely mind-numbing to me, the orgs I encounter who don’t have a god damn asset inventory.

[cr0w@infosec.exchange]

@scottwilson @badsamurai

[mustardfacial@infosec.exchange]

@cR0w @badsamurai Asset inventory is covered in "the fucking basics" for system administration, let alone cybersecurity.

[nerdpr0f@infosec.exchange]

@scottwilson @badsamurai @cR0w I'll add another caveat: It's mindnumbing the number of orgs that want a pentest but don't have an inventory.

[cr0w@infosec.exchange]

@Mustardfacial @badsamurai Right but I was curious on the LinkedIn take on it.

[cr0w@infosec.exchange]

@nerdpr0f @scottwilson @badsamurai

[badsamurai@infosec.exchange]

@Mustardfacial @cR0w right. Forget security—how do orgs even do change management without a CMDB (which is unarguably smaller and more targeted than “asset”).

[krypt3ia@infosec.exchange]

@cR0w The new insider threat

[cr0w@infosec.exchange]

@krypt3ia A lot of us have gotten no traction in that framing of it though. :-(

[futuristicrobert@infosec.exchange]

@cR0w @krypt3ia

Therapist: Why do you think you have trust issues?

Me: I work in cybersecurity.

Therapist: But that doesn't-

Me: AI

Therapiest: .... Oh.....

[krypt3ia@infosec.exchange]

@cR0w Once upon a time, the insider threat was the employee… Now, it’s the AI employee.

[viss@mastodon.social]

@cR0w @krypt3ia im trying!

[krypt3ia@infosec.exchange]

@Viss @cR0w Like all things security, we will be ignored.

[cr0w@infosec.exchange]

@krypt3ia Now it's everybody. With zero trust to the rescue we're all the insider threat. Which means no one is. Security solved.

[cr0w@infosec.exchange]

@krypt3ia @Viss Unless there's an easy way for rich people to make more money off it.

[drsbaitso@infosec.exchange]

@cR0w @krypt3ia Yeah, I think we're completely quaked. Utterly hexened.

[kajer@infosec.exchange]

@cR0w @krypt3ia @Viss what about taking money?

stop spending money on tokens, use someone elses. (stolen from group chat, stolen from shitter)

[futuristicrobert@infosec.exchange]

@cR0w @krypt3ia @Viss

THIS!!!

Security isn't profitable. Line doesn't go up unless you're an ambulance cha.... I mean "security vendor."