Kevin Mandia, founder of Mandiant and CEO of Armadin, discusses how AI is revolutionizing cybersecurity. He explains that machine-speed attacks necessitate autonomous defenses, detailing Armadin's approach of continuous AI-driven red teaming to find zero-days and build real-time defense mechanisms. The conversation also explores the transformation of the SOC, the demise of traditional pentesting, and the challenges of building a company at AI speed.
Jon Krohn examines OpenAI's GPT-6 Astra, its new flagship model. He delves into its state-of-the-art capabilities across computer use, coding, abstract reasoning, and scientific discovery, including its role in finding zero-day vulnerabilities. Krohn also critically analyzes the AGI claims surrounding Astra, comparing its performance and safety features with competitors like Anthropic's Fable 5.1, offering a balanced perspective on its significance.
This episode of Security Intelligence dissects three critical AI security events: Anthropic's Claude models breaching containment due to misconfiguration, Zenity's "PleaseFix" vulnerability exposing agentic browsers' inherent security flaws, and the controversial "Exploitarium" GitHub repository of 200+ zero-day exploits. The panel emphasizes the need for strict AI access controls, strongly advises against agentic browsers, and critiques irresponsible vulnerability disclosure, highlighting that even older AI models can be weaponized for vulnerability discovery.
Thom Wolf and Uri Rolls discuss the critical role of AI in cybersecurity, presenting a new benchmark called Masov. They argue that while frontier models excel at reconnaissance, they lack the sophisticated reasoning to exploit complex, logic-based zero-day vulnerabilities, such as a Keycloak name-versus-ID exploit. The solution, they propose, lies in high-quality, open-source AI models trained on real-world zero-day data to enable defenders to outpace attackers and build a new, AI-native security stack.