WHY THE AI VULNPOCALYPSE ISN'T THE BREACHPOCALYPSE (YET)? IT'S THE ECONOMY, STUPID

Summary from the TLDR InfoSec newsletter

Despite the rise in vulnerabilities due to LLMs, we have not observed a corresponding rise in breaches. The author argues that offensive AI agents cannot properly monetize breaches, which reduces their motivation. The author dismisses the hypothesis that attackers lack capable enough tools for breaches, given that cyber-capable open-weight models and model jailbreaks are common. The author also dismisses the hypothesis that breaches are occurring without us knowing.