Post

If anybody thinks I think GenAI cyber risks are overblown as I’m a Luddite - no, lead a global team of people who deal with emerging cyber threats and have done for years. We find the weird stuff. Amount of time I have spent dealing with incidents from GenAI cyber threats to date: zero.

I work front lines. There's a lot of concern about the accumulated risk from back level systems and potential in change of pace of exploitation. So far, the change has been in self-injury from agentic experiments. This will be a step change like fuzzing was on early introduction.