Anthropic Warns of LLMs’ Impact on (Already Shrinking) N-Day Exploit Gap
Anthropic researchers warned that modern AI tools are further intensifying the existing issue of threat actors creating N-day exploits.
All topics
AI
65 Posts
Shai Hulud Returns, How Attackers are Using AI, and More Weird MSRC Behavior
We regret to inform you that there are more npm supply chain attacks this week, and a new variant of the Shai Hulud worm is involved. We also talk about the new analysis from Anthropic on a year of data relating to how attackers are using AI in their operations, and the continuing adventures of Microsoft’s relationship […]
What the Data Tells Us About Claude Mythos and Bug Exploitability | Jay Jacobs and Michael Roytman
Finding a huge pile of bugs with Claude Mythos is great, but the logical next step is figuring out how many of those vulnerabilities are likely to be exploited in the near future. Jay Jacobs and Michael Roytman of Empirical Security join Dennis to talk about how the Exploit Prediction Scoring System can help teams […]
Solving Hard Security Problems With an Outsider’s Perspective | Sravish Sridhar
Unlike a lot of founders in the industry, Sravish Sridhar hasn’t spent his career in the security world. He comes from a background in distributed computing and advanced math, and is a successful entrepreneur who’s now bringing that experience to bear at TrustCloud, where he’s helping CISOs automate and streamline their compliance programs.
AI Has a Security Measurement Problem | Gary McGraw
Few people (if any) have spent more time thinking about and working on the hard problems in security and software than Gary McGraw, and he also happens to have a PhD in cognitive science and computer science and has been studying neural nets and AI systems for 30+ years. Gary joins Dennis to talk about […]
A Copy Fail FAQ
The latest branded bug is a slick, portable LPE in many Linux kernels going back to 2017.