Kevin BeaumontDec 20, 2024
Show threadnoodleDec 20, 2024
@GossiTheDog
Deploying an AI thing was impetus for an organisation I work with to get an independent security audit. A lot of things were found and fixed that were in preexisting workflows unrelated to AI. 'Russian AI zero days' are a great excuse to fix all the things needing fixing.
Show threadMisuse CaseDec 20, 2024
@noodle @GossiTheDog I mean, sometimes. A lot of times when the C-suite gets hung up on The Next Big Thing they will just pour money into that instead of basic stuff like vulnerability management
Show threadChris [list of emoji]

@MisuseCase @noodle @GossiTheDog

The trick is to phrase the stuff you really need as part of the plan to adopt the Next Big Thing. "Those AI zero days target unpatched servers, so we need to upgrade those ASAP."

Dec 20, 2024 at 2:29pmWeb
Show threadMisuse CaseDec 20, 2024
@suetanvil @noodle @GossiTheDog Hm, how can I spin this into getting my org to do proper vulnerability management?….