News for hackers. Stuff that matters.
Re:Microsoft opens early access to AI assistant for infosec,... by Jensson on Tuesday October 24, 2023 @12:25PM (#38001462)
> Jakkal previously highlighted the steep rise in per-second password attacks from 579 to 1,287, underlining the demand for time-saving tech for understaffed security teams.

> Rather than spending lengthy periods of time manually triaging an incident and writing up a report by hand, including a full summary of the event timeline and recommended remediation actions, Copilot compiles all of this into a report automatically.

So thanks to LLM tech it will generate thousands of written report per second? Who is supposed to read those? You already get a lot of auto generated spam emails from all sorts of systems, feels like the LLM revolution will make that way worse.

Re:Microsoft opens early access to AI assistant for infosec,... by BXlnt2EachOther on Tuesday October 24, 2023 @12:30PM (#38001537)
No worries, there will be LLM subscriptions to summarize the output of other, overly prolific LLM subscriptions.
Re:Microsoft opens early access to AI assistant for infosec,... by SteveNuts on Tuesday October 24, 2023 @02:00PM (#38002823)
So we need to use AI in order to make AI useful?

What are we doing as an industry?

Re:Microsoft opens early access to AI assistant for infosec,... by vorpalhex on Tuesday October 24, 2023 @12:34PM (#38001589)
I'm pleased to announce my new SecurityComplianceLLM which will read and analyze every security report, checking off any paperwork your enterprise requires!

It won't actually do anything or take meaningful actions but it will book a weekly sync meeting on everyone's calendar so you can talk about what actions you might take in the future, one day, when the stars align.

For an extra $50/mo, the LLM will even email out a weekly report of what you talked about but with more charts and gifs.

Unfortunately we still have not found the technology to help your enterprise adopt a sane password policy or a real 2FA method. Such advances may be beyond even the farthest reaches of mankinds intelligence.

Re:Microsoft opens early access to AI assistant for infosec,... by czbond on Tuesday October 24, 2023 @01:30PM (#38002387)
/var/log and OSSEC already report that many & (OSSEC) takes care of them. Some variant of these tools will just be like an app firewall
Re:Microsoft opens early access to AI assistant for infosec,... by PretzelPirate on Tuesday October 24, 2023 @02:25PM (#38003192)
> So thanks to LLM tech it will generate thousands of written report per second? Who is supposed to read those?

I don't think it will send out thousands of reports a second. From watching a video linked in this post, it seems like multiple issues can be linked to a single incident and the entire incident can be summarized.

If you have 100k employees all being attacked, you'll likely get a single report that shows a large-scale attack.