Tomer Attias

Attacks will accelerate from here on - We are there: Six months ago I said Mythos like capability will be widely available. It's happening. A critical vulnerability, a social engineering attack that looks innocuous, or daisy chaining publicly available vulnerabilities and conducting a sniper strike is all being witnessed in the wild. Incident responders have never been busier. Some key points: - attacks are not becoming more sophisticated, it's the same attacks, faster and by a lot more people. - attack path discovery which took trial and error and multiple attempts is now trivial, open source LLMs are here to help - you are as secure as your supply chain, insecure down or upstream players who have access to your infrastructure could be the next attack path, marketplaces and supply chain is an easier vector The increase in activity is a result of more people becoming better at hacking due to the ease of being able to attack. Had not contemplated that in my calculus. Please: 1. Test your infrastructure for accessible vulnerabilities and misconfigurations 2. Fix your code and demand your vendors do. 3. Old infra, or insecure infra at the perimeter needs to be updated first 4. New AI tools, especially coding need a security framework. Your developers will do more with code, new skills, and more automation. Don't forget the coding models have trained on human code. Stay safe this Halloween :)