Justin "Hutch" Hutchens: AI's Impact on Cybersecurity

Summary:
In this episode of the Phillip Wylie Show, Phillip interviews Justin "Hutch" Hutchens, an offensive security professional and author of "The Language of Deception: Weaponizing Next Generation AI." They discuss the emerging risks and opportunities of artificial intelligence (AI) in the cybersecurity space. Justin shares his experiences with using AI to automate social engineering attacks and highlights the potential dangers of AI-powered conversational agents and technical agents. He also explores the defensive applications of AI, such as using language models for threat intelligence and incident response. The conversation concludes with a discussion on how individuals can leverage AI resources to improve their skills and stay ahead of the curve.

Key Takeaways:

• AI-powered conversational agents can automate social engineering attacks, posing a significant risk to individuals and organizations.
• The emergence of AI-powered conversational agents and technical agents raises concerns about the potential for large-scale manipulation and exploitation.
• Language models can be used to filter and make sense of unstructured threat intelligence data, improving the efficiency and effectiveness of security operations.
• AI has the potential to revolutionize incident response by automating the creation of runbooks and enabling faster, more efficient incident resolution.
• Individuals can take advantage of AI resources by experimenting with language models and exploring freely available courses and resources.

Quotes:

• "The fact that now, instead of just getting a phishing email, I could now be having a conversation with someone on LinkedIn, or if they've managed to get access to my internal network, possibly even on something like Teams or Slack." - Justin Hutchens
• "The most profound new capability that we're seeing with these language models in a defensive capability is being able to take that unstructured data and figure out what is relevant to me, what is relevant to my organization." - Justin Hutchens
• "The most important thing is really just starting, getting your hands on it and playing with it." - Justin Hutchens

Socials and Resources:

https://www.linkedin.com/in/justinhutchens/

https://twitter.com/sociosploit

https://www.wiley.com/en-cn/The+Language+of+Deception%3A+Weaponizing+Next+Generation+AI-p-9781394222544