AI is turning offensive security into a continuous necessity
The rise of AI has CISOs facing even more vulnerabilities than ever, resulting in increasingly difficult decisions around what fixes to prioritize. “When I was a CIO, the hardest part of my job was deciding what not to do,” Snehal Antani, CEO of pentesting platform Horizon3.ai…
Noch kein anderes von Zonactu verfolgtes Medium berichtet über diese Meldung.
CSA’s Mogull, who now tests every piece of code he writes with AI, still sees a role for human pen testers. “I have a lot of friends who are pen testers and red teamers. They’ll still come in, but now they’re bringing the bigger guns, the big game experience,” he says.
Gray Swan’s Winter agrees that even with continuous monitoring and pen testing, the kind of periodic measures that traditionally make up offensive security can bring a level of depth and digital evidence that instant and automated tests can’t provide. Implementing more autonomous measures because of the accelerated pace of AI “isn’t to say that SOC 2 compliance, your annual pen test that might go a little deeper, aren’t useful because you do have to probe those systems at depth and also kind of prove it,” Winter says.
Noma Security’s Kelley emphasizes that even if AI monitoring and pen testing can outperform traditional methods, it’s crucial that cybersecurity programs retain human personnel who have the foundational offensive security skills to guide the automated processes that might overshadow the old modes of testing.
