4 ms·
> OAuth trust relationship cascaded into a platform-wide exposure > The CEO publicly attributed the attacker's unusual velocity to AI > questions about detect
by _pdp_ 6mo ago
> OAuth trust relationship cascaded into a platform-wide exposure
> The CEO publicly attributed the attacker's unusual velocity to AI
> questions about detection-to-disclosure latency in platform breaches
Typical! The main failures in my mind are:
1. A user account with far too much privileges - possible many others like them
2. No or limited 2FA or any form of ZeroTrust architecture
3. Bad cyber security hygiene
- JauntyHatAngle 6mo agoBlaming AI is gonna be the security breach equivalent to blaming ddos when your website breaks isn't it.
- anematode 6mo agoThat part of his tweet made me laugh out loud. I don't understand who it's directed toward.
- BoorishBears 6mo agoThe market. Rauch is 'strategic' like that, he'd even use a moment like this sneak in a sound bite to froth the market he has so much skin in "Vercel CEO says AI accelerated attack on critical infrastructure"
- anematode 6mo agosigh Right. Ironically, if the timeline is true that the attackers had been inside for months, the AIs they had access to are substantially weaker than today's frontier models. How much faster would they have achieved their goals with GLM 5.1?
- xienze 6mo agoI think there’s a lot of truth to “the AI did it” though. We’re encouraging the same people who get tricked by “attached is your invoice” emails to run agent harnesses that have control of your desktop. I think there’s gonna be a lot of AI-powered exploits in the future.
- progbits 6mo agoIt's the new sophisticated nation state.
- ekropotin 6mo agoThe idea of blaming something you can choice not to do is quite strange.
- paulddraper 6mo agoYou can choose for attackers not to use AI?