このエピソードについて
AI-enabled cyber attackers will check every third-party path into an application at scale and speed. The same process can help defenders just as much, but it's only as effective as the human expertise guiding it. Andrew Wesie, Xint co-founder and CTO. explains how human engineering in harness construction is the determining factor between real, autonomous exploit discovery and validation versus a machine that just generates more noise.
Segment Resources:
- Business logic vulns, https://xint.io/blog/compaction-smuggling-reasoning-traces and https://xint.io/blog/openai-compaction-inference
- Securing apps and their third-party access, https://xint.io/resources/the-side-door-problem-what-the-korean-bank-breaches-mean-for-us-banks
- Working with DARPA to test the infrastructure surrounding messaging apps, https://xint.io/blog/darpa-selects-xint-to-research-source-code-vulnerabilities-in-critical-messaging-applications-used-in-military-communications-330339
This segment is sponsored by Xint. To learn more, visit https://securityweekly.com/xint!
Show Notes: https://securityweekly.com/asw-408
英語
アメリカ合衆国
文字起こし 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
このポッドキャストの他のエピソード
AppSec has always emphasized techniques and tools for discovering vulns, along with taxonomies and lists for describing them. But just piling up more CVEs into a prioritized patching queue has never been an effective strategy. Nidhi Aggarwal talks about some of the economics and decisions that orgs…
We showcase recordings from this year's Black Hat.
The Hidden Risks of the AI Supply Chain - Black Hat interview with Michael Leland, VP and Field CTO of Island
Agents can independently discover and install tools, but the emerging ecosystem of Skills and MCP servers lacks many of the trust and se…
While agents and LLMs haven't fundamentally changed core mobile vulnerability types, they have supercharged speed, scale, and accessibility—democratizing threats like automated phishing, synthetic identity fraud, and easier identification of hard-coded secrets. Ryan Lloyd and Jason Cortlund break d…
All sorts of cybersecurity disciplines are adopting agents to help humans save time and automate routine activities. Sai Kiran Uppu describes his work on creating a platform for agents to analyze external threat intel, examine internal systems, and present triage decisions to operators. This type o…
Sandboxing, least privilege, and monitoring are well-established controls in terms of the defenses they provide against unexpected and unauthorized actions. But being well-established in theory doesn't always translate to successful in practice. Kieran Human talks about some of the properties that …
免責: このページに埋め込まれているポッドキャストとアートワークは Mike Shema からのものであり、その所有者の所有物であり、Listen Notes, Inc. と提携または承認されていません。
