For those getting questions about Glasswing from their executives, give them this article.
https://tryaether.ai/blog/anthropic-glasswing-frontier-attack
Aether AI's agents pressure test your attack surface continuously, across every attack vector, internally and externally. The same agents then dynamically generate the unique defensive signals required to protect your organisation at machine speed.
@Sempf Yeah, that's a no for me. My risk models remain unchanged.
He is right that AI gives us the catalyst and the tools.
@Sempf @cR0w "We have a different question. When did zero days become the threat you were supposed to be worried about?"
I mean, yeah, but also just because somebody is doing the basics poorly does not mean that advanced techniques are not *also* a threat. Many threats simultaneously! And some of them just became more risky and easier for attackers to leverage ...
@Sempf @darkuncle @cR0w This is pretty funny. I was literally having this conversation with a colleague (less technical, less security focus) a couple of hours ago. The gist:
Him: Anthropic's stuff is so cool! It's amazing at vulnerability discovery. It's going to revolutionize the way the attackers do their work. Just imagine, 0-days and full kill chains at the push of a button.
Me: Yeah, it does seem pretty cool, and I'm pretty happy I didn't take that job as a vulnerability researcher a while back... but how is this going to really change behavior when most of what we see exploited are unpatched N-days? Why would attackers need to waste money on this when they can just, say, ../ on a public, unpatched Ivanti box?
Bill
cR0w 
Scott Francis
Soatok Dreamseeker
NosirrahSec 🏴☠️ guillotine enthusiast
Aaron
Rob O 
nixFREAK
musing_sys🇨🇦
DDR
blami
vxo