One vendor's misconfiguration reached four AI labs. Nine intrusions, weak passwords and leaked credentials, and a boundary that existed only in the prompt.
At $dayjob the boss has a saying about classic antivirus software that it works by asking the patient if they are OK and if they say yes believing them. A lot of the AI protection seems to work on the same kind of principle. Tell the AI to not do something and believe them when they say they won't but don't have some thing external to check/validate/confirm.
As someone in network security I find the lack of network and DNS blocking to be the most surprising thing in the various Irregular related incidents. I think these people are basically incompetent at network security. The fact that their SIEMs did not trigger on alerts about abnormal activity is also amazing, but I suspect it is because they didn't actually have a SIEM to alert or had not got it set up correctly.
The IT industry is moving in the wrong direction; instead of using this technology to improve quality and robustness, they (or we) are dramatically reducing software development quality, and no one cares
At $dayjob the boss has a saying about classic antivirus software that it works by asking the patient if they are OK and if they say yes believing them. A lot of the AI protection seems to work on the same kind of principle. Tell the AI to not do something and believe them when they say they won't but don't have some thing external to check/validate/confirm.
As someone in network security I find the lack of network and DNS blocking to be the most surprising thing in the various Irregular related incidents. I think these people are basically incompetent at network security. The fact that their SIEMs did not trigger on alerts about abnormal activity is also amazing, but I suspect it is because they didn't actually have a SIEM to alert or had not got it set up correctly.
The IT industry is moving in the wrong direction; instead of using this technology to improve quality and robustness, they (or we) are dramatically reducing software development quality, and no one cares
We’ve opened a Pandora’s Box. How will this story end?
We will see this movie to the end