I’m often ask about the latest examples of AI empowering threat actors. cyber-safety.co posted an article about AkiraBot bypassing CAPTCHA systems using AI capabilities. That article can be found HERE. What’s interesting to me is how this is just the first step of AI mimicking users to bypass defense capabilities. I’m sure AI powered bots will learn to bypass other behavior detection as well as become extremely effective at detecting sandboxes to avoid detonation unless it’s a real target.
Hopefully understanding this highlights the fact that traditional security capabilities are dying. Yesterday is a great day to take a hard look at not only your defense in depth strategy, but also start to tabletop / test what happens when a capability is bypassed. The likelihood of a specific capability failing continues to increase as AI empowers threat actors.