I feel like getting over engaged in the AI safety discourse is a massive psy-op that only assists whatever fuckwitery is going on to push up the value of certain companies. When you boil it all down, what's really happening is: 1. Yes, AI is in many cases able to hack more persistently and more creatively than your average attacker. 2. Decades of poor cyber practices are now all coming to a head. Anyone in cybersecurity has been shouting about unpatched servers, flat networks, lack of egress filtering, missing MFA and legacy systems held together with duct tape for twenty years. Those holes were always there. AI simply finds them faster and at scale. 3. The companies loudest about the danger are often the same ones selling the product. "Our model is so powerful it's scary" makes a great headline, and it doubles as the best capability ad money can buy. Investors hear "incredibly powerful" long before they hear "be careful." 4. The fear also shapes policy in ways that suit the biggest players. Heavy compliance regimes and licensing proposals sound responsible, and they also build moats that only a handful of billion-dollar companies can afford to cross. So what do you actually do? The same boring stuff we should have been doing all along. Patch your systems (0day to unpatched compromise is like 1:10,000). Enforce conditional access everywhere you can. Segment your networks. Know what's actually running on your estate. Fund your security team properly. Test your defences with the same AI tools attackers now have access to. You've got work to do anon, go secure your shit.