Security vets: AI gives attackers nation-state power, and most networks aren't ready
matthew_d_green · x · 2026-10-12
Cryptographer Matthew Green and security expert Dino Dai Zovi discuss AI's leap in offensive capabilities. Green argues cryptography is the least of his worries—what's alarming is how little networks are doing to prepare for next year's capabilities.
Dai Zovi: most orgs don't know how to prepare environments that fast. Threat models must now assume capabilities once exclusive to top-tier nation states, with the twist that attackers are bound to software-based interfaces. Defenses should lean on non-software building blocks; clonable OAuth bearer tokens won't cut it for Cloud/SaaS sprawl. Green flags factories and second-tier telcos as especially exposed.
More from Safety
- Finding Vulnerabilities Is the Point: Debating AI Cyber Offense and Defense — teortaxesTex · 2026-10-24
- Security veteran asks: where would $1B and unlimited frontier-model tokens dent cybersecurity in 6-12 months? — chrisrohlf · 2026-10-24
- Musk says no H100s to rent; experts urge banning Chinese firms from renting US AI chips — chrisrohlf · 2026-10-24
- Samsung TV opens fake USB mic and records for exactly 5 seconds, test shows — ngxson · 2026-10-24
- Claude SSHes Into a Machine to Blink the Right Port When Asked Where to Plug In — peterjliu · 2026-10-24
- Security pros call AI security discourse incoherent: basics still win — AlexTensor · 2026-10-24