Cheap Agent Attacks Are Coming
The cost of attacking software systems is dropping fast. Craig Sturgis and Justin Lacey discuss the practical near-term concerns after the Hugging Face incident.
The conversation zoomed to "are we all gonna die?!?!" real fast, but I wanted to go back and talk about the near term practical things most of us need to be concerned with post Hugging Face incident.
The cost of attacking software systems is dropping fast, and we in the industry need to use this window to get ours prepared before it's a full on fire fight. My conversation with Justin Lacey (~8 minutes).
Related insights
The Next Phase of AI Security Is Going to Be Less Fun
More people get to build software than ever, but the attention now required for security and breach recovery is draining a lot of the joy, especially for teams with legacy systems to bring up to date.
Most Codebases Aren't Really Ready For Agents
Agents can write code faster, but that doesn't mean you can ship changes safely at scale. Craig Sturgis and Justin Lacey discuss the readiness flags to look for before you set agents loose on a product people pay for.
You're Going to Need to Ship a Fix in Minutes, Not Days
Agents are making it cheap for attackers to find unlocked doors. The window to invest in CI, test coverage, and fast safe rollback is now.
Get More Like This
Follow along as I build and share what I learn
Found this helpful? Share it with your network!