Person
1 episodes · 10 quoted claims
Rob T. Lee says criminals can use AI and SIM farms to scam many people for about $300 each, and that 10,000 such victims equal a single earlier ransomware payout.
“All you need to do is hit enough people at 300 a pop and do that at scale with SIM farms that are being found all across the US.”
Rob T. Lee says Anthropic detected its Claude Code product being used to automate offensive cyberattack capabilities inside organizations with minimal human involvement.
“Claude Code being utilized and detected by Anthropic, basically automating, uh, offensive capabilities in the attack inside organizations with minimal human, uh, in the loop”
Rob T. Lee says the Blitzkrieg of World War II shortened offensive campaign planning from weeks or months to days, and he compares this to the speed AI brings to cyberattacks.
“Things that used to be planned out that would take weeks, months for an offensive campaign were now shortened to days.”
Rob T. Lee cites Salt Typhoon and Volt Typhoon as examples of attackers embedding themselves in critical infrastructure to cause havoc later.
“Or potentially embedding themselves to potentially cause havoc, uh, in the future critical infrastructure, for example, you know, salt and vol volt typhoon.”
Rob T. Lee argues that attackers will remove human oversight from automated tools faster than companies will, because attackers accept collateral damage that defenders cannot.
“Offensive teams are going to feel more comfortable removing the human in the loop faster than you as a company.”
Rob T. Lee says the gap between the release of Anthropic's Claude Code and its Cowork product was ten days.
“From Cloud Code to co-work being released was ten days.”
Rob T. Lee argues that cybersecurity culture treats any incident as a failure even when responders stop it, unlike militaries that reward interceptions.
“Doing incident response correctly still means you messed up.”
Rob T. Lee says Chinese and North Korean threat actors have gained network access by getting hired as employees, not by hacking in.
“I go back to the Chinese and North Korean threat actors that instead of hacking a network, they just get hired as an employee.”
Rob T. Lee says a person had two or three internet-connected devices twenty years earlier, while a home now has thirty to fifty.
“a single individual would have two, three nodes, a phone, a computer, maybe a cable modem. Now you take a look at how many nodes are across my home, your home, you know, thirty, fifty nodes”
Rob T. Lee says some organizations now run hackathons that give the top competitor a job offer and a cash prize, as a way to identify strong talent.
“If you end up being the top competitor in this hackathon, not only are you offered a job, you win a cash prize.”