The Post-AI Security Floor

Cybersecurity recommendations during The Hackening. In 2023 I guessed that AI would help attackers before it helped defenders, and that their lead would last three to five years. We're inside that window now. Red will move much faster than blue on this. Attackers can be sloppy and fast, and defenders have to be a lot slower and more careful. Unsupervised Learning NO. 417 (January 2024)As I wrote in Attacker vs. Defender AI Advantage, attackers can go from learning something to using it in minutes or hours, while most companies still need weeks or months. So this list is about the things you can do quickly, without waiting on a big program.1. Have a full list of everything you have shipped online Every website, every app, every API, every database, every container, etc. Don’t worry about a fancy database if you don’t have one already. Just get the stuff in a Markdown file. Or a spreadsheet. Whatever you’re most comfortable with.I've been saying some version of this since 2007: "you…