Cybersecurity in the Age of AI: What Experts are Saying | Grey Noise Blog
Summary: GreyNoise assembled a panel of security professionals for a May 30th webinar, "AI for Cybersecurity: Sifting the Noise," in which panelists argued that LLMs and GPTs are tools that recognize patterns in data rather than intelligent actors. One panelist described GreyNoise's Sift tool surfacing an F5 BIG-IP attack that chained CVE-2022-1388 (auth bypass) with CVE-2022-41800 (authenticated code execution) using a deliberately obvious proof of concept, an unnecessary combination presumably meant to avoid detection.
Why it matters: The attacker chained two F5 BIG-IP vulnerabilities and used a conspicuous proof of concept when a standalone RCE exploit already existed, so detection logic tuned to obvious signatures is what caught a campaign built to evade it.
Read the original at GreyNoise Blog ↗
- Mentions
- CVE-2022-1388CVE-2022-41800
- Related
- CVE-2022-1388: F5 BIG-IP Missing Authentication Vulnerability Known Exploited Vulnerabilities · May 10, 2022