Just a reminder to please please please have a plan right now. Posted anonymously from an international DFIR friends’ chat. Anyone in consulting IR can confirm it’s horrible right now and we can’t likely help if you don’t have a plan or retainer.
Yea a lot of this is AI based but the initial entry is definitely not sophisticated. It’s just everyone’s dirty laundry getting aired at once, and killing security by obscurity.
It’s my full time professional area, and I’m very honoured my follower base has expanded beyond it.
The long and short for not the target audience is we have run out of forensic analysts to respond to hacking of businesses because it’s so horrible right now.
Funny how AI has enabled automated attacks against stuff we begged to be secured but was ignored until it was in disrepair, but AI is not able to replace human defenders to the point we’re reaching critical burnout and lack of people in DFIR.
@hacks4pancakes I wish nonprofits and public agencies were better prepared.
Namely, thinking about my NYC borough's library system (which has the busiest branch in the whole U.S.): https://infosec.exchange/@AlesandroOrtiz/117560793394320594
@hacks4pancakes hey, ai did that laundry 🧺 for them now lol. Mkay it takes a lot of talent I would guess to build automated systems that do this I would guess. Maybe people just vibe code hacking code now who knows. Anyone can do it now just need to figure it out.
It is pretty nuts AI is going to make low hanging fruit people don't clean up because it has a complexity modifier on the cvss. So vulns maybe more severe and less severe at lol
@hacks4pancakes The alarms for risks and the backslide about IT/OT/MT (and their convergence in ICS) security have been sounded louder and louder for over a decade.
Foxguard, Dragos, Coalfire, Rockwell, Tenable, Nozomi, all of them have been screaming and publishing papers, whitepapers, conference talks, and more all to get folks to pay attention.
If only people had...
@j4yc33 @hacks4pancakes
If only people had...
...an AI DFIR agent?
You know it's coming.
"I detected ransomware and deleted all encrypted files. To be safe, though files on host 'BACKUPNAS01' were not encrypted, the filenames were similar so I deleted those as well. Is there anything else I can do for you?"
Nov 11, 2026, 7:28 AM@hacks4pancakes Funny how AI companies are spending millions on finding weaknesses in our project, but have no intention to contribute to improving the public good.
It's worse.
Often enough it's already at "... even if you have a retainer."
Especially if you are only at several million dollars loss a day (or below).
It's not that AI is better in hacking or companies becoming worse at securing their systems (well, debatable, but let's stay optimistic) - it's just the gargantuan compute being thrown at all the recklessly neglected systems.
