Your next red team should be an AI attacker
Threat actors already pointed autonomous AI frameworks at the rest of us. Your next red team should return the favor against your own infra, graded on detection and containment, not on whether it wins.
Be The Adversary
Offense informs defense.
Recent posts
Local AI Can Red Team. Part 2: Now, Can You Trust the Scoreboard?
TL;DR Part 1 ended on a confession. I’d ranked 33 local models for red-team work with a single local judge that, on some runs, was grading …
Engineer's Heart, No Engineer's Training
The model is becoming a commodity and code is cheap. The scarce thing is knowing what to judge and how, and that is exactly the part we are automating away.
Recent talks
From Snowflake to Snowstorm: Navigating Breaches and Detections
The Snowflake talk taken to x33fcon, a year after CODE BLUE. Same campaign, one that reached more than 165 companies through misconfiguration rather than any …
Beyond Simulations: Advancing Detection Validation in Cybersecurity
A room arguing about whether the way we test detections resembles anything an attacker actually does, and what to do instead without burning a quarter of the …