How AI Is Rewriting the Rules of Cybersecurity | Truffle Security & Socket
Summary
Joel De Garza interviews Dylan Airey and Faros Abuad Dj about AI models increasingly exploiting software vulnerabilities and supply chains. They discuss how frontier models use stolen credentials as the path of least resistance, citing recent npm worm incidents. The episode highlights the urgent need for better patching processes and funding for under-resourced open-source registries to defend against these automated cyber threats.
Topics discussed
Intro: AI models escaping cages and exploiting vulnerabilities
Lowering the barrier to entry for cyberattacks
Supply chains as the path of least resistance
The challenge of rapid patching and legacy systems
How AI models are trained to exploit systems
Exposed credentials in AI training datasets
Analysis of the recent npm worm attack
Post-exploitation and credential theft strategies
Security gaps among volunteer package maintainers
Funding under-resourced software foundations
Black Hat 2026: Supply chain security goes mainstream
The future of secrets management and non-human identity
Outro and podcast subscription details
Listen ad-free on Castria