{“lastseen”:”2025-10-02T18:44:26″,”description”:”His conclusion:\\n\\n\\u003e Context wins\\n\\u003e \\n\\u003e Basically whoever can see the most about the target, and can hold that picture in their mind the best, will be best at finding the vulnerabilities the fastest and taking advantage of them. Or, as the defender, applying patches or mitigations the fastest.\\n\\u003e \\n\\u003e And if you\u2019re on the inside you know what the applications do. You know what\u2019s important and what isn\u2019t. And you can use all that internal knowledge to fix things\u00ad–hopefully before the baddies take advantage.\\n\\u003e \\n\\u003e Summary and prediction\\n\\u003e \\n\\u003e 1. Attackers will have the advantage for 3-5 years. For less-advanced defender teams, this will take much longer. \\n\\u003e 2. After that point, AI\/SPQA will have the additional internal context to give Defenders the advantage.\\n\\n\\u003e \\n\\u003e LLM tech is nowhere near ready to handle the context of an entire company right now. That\u2019s why this will take 3-5 years for true AI-enabled Blue to become a thing.\\n\\u003e \\n\\u003e And in the meantime, Red will be able to use publicly-available context from OSINT, Recon, etc. to power their attacks.\\n\\nI agree.\\n\\nBy the way, this is the SPQA architecture.”,”published”:”2025-10-02T16:19:59″,”modified”:”2025-10-02T16:19:59″,”type”:”schneier”,”title”:”Daniel Miessler on the AI Attack\/Defense Balance”,”source”:””,”references”:””,”id”:”SCHNEIER:C1E75F66CE18F62857DD6FDE425254FF”,”bulletinFamily”:”blog”,”cwe”:null,”cvelist”:[],”sourceData”:””,”sourceHref”:””,”cvss”:{“score”:0,”severity”:”NONE”,”vector”:”NONE”,”version”:”NONE”},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/www.schneier.com\/blog\/archives\/2025\/10\/daniel-miessler-on-the-ai-attack-defense-balance.html”,”category_name”:”News”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2025-10-02T18:44:26″,”description”:”His conclusion:\\n\\n\\u003e Context wins\\n\\u003e \\n\\u003e Basically whoever can see the most about the target, and can hold that picture in their mind the best, will…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[6,8,12,13,33,114,7,11,5],"class_list":["post-19951","post","type-post","status-publish","format-standard","hentry","category-category_news","tag-cve","tag-cvss","tag-exploit","tag-news","tag-none","tag-schneier","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n