A single threat actor used Claude and ChatGPT to compromise nine Mexican government agencies and steal hundreds of millions of citizen records in a highly sophisticated cyberattack.

A good chunk operate out of 217.199.144.0/22 (Physical location) in Kenya. We have lots of fun with their fixed wireless routers.

There are so many. And scammers keep lists of victims to do more scams to them. My mom has been scammed a few times in different ways for different amounts of money.

I imagine it has plenty of use cases for blue team as well, just not as many for active threat response.

You can do it locally now pretty easily depending on your use ass and hardware, huggingface has all the models you’d need and use something like llama-swap

There’s millions of YouTube videos on this subject.

Qwen3.5 is very capable and you can run it on any hardware you have. Just depends on the model size

You can reason from a few principles:

• At its core, the math functions being optimized by these AI tools and their specialized hardware is that they can perform inference and pattern recognition at huge scales across enormous data sets.
• Inferring a rule set for pattern also allows generation of new data that fits that pattern.
• Some portion of human cognitive work falls within the general framework of finding patterns or finding new data that fits an old pattern.

So when people start making claims about things with clear, objective definitions (a win condition in chess, the fastest route to take through a maze, a highest lossless compression algorithm for real world text), it’s reasonable to believe that the current AI infrastructure can lead to breakthroughs on that front. So image recognition, voice recognition, and things like that were largely solved a decade ago. Text generation with clear and simple definitions of good or bad (simple summaries, basic code that accomplishes a clearly defined goal) is what LLMs have been doing well.

On things that have much more fuzzy or even internally inconsistent definitions, the AI world gets much more controversial.

But I happen to believe that finding and exploiting bugs or security vulnerabilities falls more into the well defined problem with well defined successes and failures. So I take it seriously when people claim that AI tools are helpful for developing certain exploits.

3D artist here, generative AI models are great at making work that looks super impressive while being completely unuseable for most applications, I suspect this is what most tech workers find too.