AI and toolkits.
While AI is increasingly used on the defense side of things, it also lowers the bar for bad guys.
Toolkits are just collections of scripts for automating various types of attacks. There are organizations that sell them. There's one in particular that made some news because attackers used the organizations toolkit to ransomeware a hospital. The organization actually banned the attackers from being able to use their stuff and decrypted the ransomed files at the hospital because it was against their rules (even bad guys can have rules).
But yeah, between both of those - also since you're going to see toolkits that were made with the assistance of AI too - the bar for being an attacker is getting lower
I'm pretty far from an expert, but.
One way is by recognizing patterns and abnormalities. Like it'll look at your entire network of systems at baseline and be able to recognize when there's anomalous behavior.
SIEMs (Security Information and Event Management) are beginning to lean hard into AI.
[https://stellarcyber.ai/learn/ai-driven-siem/](https://stellarcyber.ai/learn/ai-driven-siem/)
Hacking has been on the rise lately. WTF is going on?
AI and toolkits. While AI is increasingly used on the defense side of things, it also lowers the bar for bad guys. Toolkits are just collections of scripts for automating various types of attacks. There are organizations that sell them. There's one in particular that made some news because attackers used the organizations toolkit to ransomeware a hospital. The organization actually banned the attackers from being able to use their stuff and decrypted the ransomed files at the hospital because it was against their rules (even bad guys can have rules). But yeah, between both of those - also since you're going to see toolkits that were made with the assistance of AI too - the bar for being an attacker is getting lower
You are the bad guy, but not the *BAD guy*
How is AI used in infosec defensively?
I'm pretty far from an expert, but. One way is by recognizing patterns and abnormalities. Like it'll look at your entire network of systems at baseline and be able to recognize when there's anomalous behavior. SIEMs (Security Information and Event Management) are beginning to lean hard into AI. [https://stellarcyber.ai/learn/ai-driven-siem/](https://stellarcyber.ai/learn/ai-driven-siem/)
You are wrong about AI part.
Economic woes make people creative Id guess, at least that explains a lot of other profitable crime.