Security researchers argue AI is killing traditional TTP-based threat attribution

cyb3rops · x · 2026-10-30

• At the unpromptedconf conference, @fr0gger gave a talk on "the death of TTPs (for attribution, clustering)", arguing AI weakens behavioral signals for threat analysis and prediction as attackers can trivially vary techniques.
• He sees new forms of TTPs emerging: adversarial prompts, agent behaviors, and AI infrastructure correlations, and says CTI processes should adapt to track these attack patterns.
• The take resonated with peers like @eyalsela and drew attention from security researchers including cyb3rops.

Original post →

More from Safety

• New work on safely delegating oversight to misaligned agents — Aaroth · 2026-10-30
• NIST proposes 10 design tenets for agent identity management systems — rseroter · 2026-10-30
• Unitree Go2 and G1 robot dog firmware 0-day research slides published after coordinated disclosure — dyn___ · 2026-10-30
• AI Nonprofit Fathom Forms Executive Council of Bipartisan Governors and Security Experts — geoffreyirving · 2026-10-30
• GLM-5.3 completes 3 of 13 multistage cyberattack scenarios, strongest open-weight model tested by Irregular — cyb3rops · 2026-10-30
• Security researcher: 2,200 ARTEX C2 servers spotted, AI-generated C2 frameworks already in use — cyb3rops · 2026-10-30

Safety channel →