Govt should get the Big 5 labs to dedicate at least 20% compute to cybersecurity right now and subsidize part of the tokens. Chinese bots reaking havoc is the closest thing to a kinetic war we'll have on our homeland. NSA / DoW needs to lock in rn.

the only thing that can stop a bad swarm with a gun is a good swarm with a gun

The NSA is telling American companies to take production systems offline. The AI-era of cybersecurity has fully arrived.

The China state-aligned threat actor Storm-0940 used the agentic AI penetration testing framework ARTEX to automate attacks targeting hundreds of organizations globally across a broad range of industries. Microsoft Threat Intelligence assesses that Storm-0940 was responsible for the recently disclosed ConnectWise supply chain compromise of a multitenant application. msft.it/6018aakEE Our investigation found that Storm-0940's use of ARTEX accelerated the speed of compromised application abuse to authenticate to target environments through applications that had already been granted access, allowing the threat actor to operate without requiring an interactive user sign-in. AI-accelerated follow-on activity included reconnaissance, application credential changes, and attempts to modify privileges that could enable expanded or persistent access. Read our blog for a detailed analysis and indicators of compromise (IOCs), along with Microsoft Defender detections, protection recommendations, and guidance on investigating service principal sign-ins and unexpected application credential or privilege changes.

think today’s php disclosure is a harbinger of things to come. these models will make us all safer by finding long lurking issues. however the entire software supply chain will need the muscles to rapidly build and deploy fixes. we might need a lot more public + private partnerships to secure infrastructure across the country.

1/ pretty bad out there. We have to fix the last 50 years of software and internet sloppiness. Faster than adversaries can find the holes, and faster than we ship new ones (with agents!). CVEs went from ~4k a month to ~15k since April. That is not business as usual.

Which yields an expected AI IQ-equivalent of ~190–225 by 2030, and ~225–340 by 2036... 🧐