GM. Hump day. Here's the line up:View quoted post on X
- @cuenca (Magnific)
- Sam Endacott (Northzone)
- @stevehou (Silicon Data)
- @varinnair (Factory)
- @CaplanWill (Tano)
- @levie (Box)
Join us live.
AI hacking capabilities that were restricted by frontier model guardrails just months ago are now available through open-weight models.
Factory's @varinnair warns attackers are already using custom AI agents in real-world cyberattacks:
"The open weight models have clearly caught up in terms of what they can do in terms of offensive security. Now these tools are available to anybody."
"People have started building custom harnesses like ARTEX and HexStrike, which are used in real attacks today, in the last few months."
"Mythos really scared a lot of CISOs because they realized that, okay, theoretically, models can find vulnerabilities in your system, but they hadn’t really seen a breach. That changed in October, on Black October."
"After Black October, people suddenly started realizing, 'Okay, this is actually a big deal. We need to do something with our budgets.'"
@factoryView quoted post on X
Factory's @varinnair warns most companies are still defending against human hackers, while AI agents can execute thousands of operations per hour across multiple systems simultaneously:
"In the last few months specifically, the tools and the techniques that attackers are using has changed quite meaningfully."
"Attackers have started using agents with custom harnesses to run large parts of an intrusion all by themselves, from finding a way in, to stealing credentials, to moving across systems."
"Agent-driven attacks today launch hundreds if not thousands of operations in a given hour, which is much more than what a human attacker can potentially do."
"These agents are also attacking multiple parts of your infrastructure in parallel, whereas if you look at how human operators behave, it's usually a lot more sequential."
"Most companies' security practices are really designed around human attackers."
@factoryView quoted post on X
ANTHROPIC IPO | SHORT TIMELINES | MERCOR RAISES x.com/i/broadcasts/2…View quoted post on X
30 years ago today, Phrack 49 published Aleph One’s “Smashing the Stack for Fun and Profit”.
A legendary paper that inspired generations of hackers and helped shape modern exploit development.
Still an essential reading.
phrack.org/issues/49/smas…
Phrack 73 is coming soon!View quoted post on X
