PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

A foundation of quicksand: How AI slop is impacting public sector security

bugcrowd.com | blog | #ai-security | #bug-bounty | #cisa | #offensive-security | #public-sector | #technical-debt | #secure-by-design | #resilience | #human-expertise
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

The real public sector security crisis isn't AI slop but decades of technical debt and weak foundations that AI exposes; human researchers remain a critical force multiplier.
Published
Collected

Related coverage

blog · wiz.io
Scan for Good: Using AI to discover and fix high-priority exposures across public services and critical infrastructure
Wiz's Scan for Good pairs AI scanning with human researchers to find public exposures in critical infrastructure and nonprofits, driving hundreds of fixes with Google DeepMind and CISA support.
blog · wiz.io
How Wiz Meets CISA “Secure by Design” Objectives
Wiz, a founding participant in CISA's Secure by Design initiative, details its pledge progress—no-cost SAML 2.0 SSO, mandatory MFA for direct logins, no default passwords, and least-privilege service accounts.
blog · bugcrowd.com
CISA’s VDP platform: Five years of collaborative defense
CISA’s VDP Platform marks five years with nearly 45,000 submissions and 5,300+ vulnerabilities fixed across 60+ federal agencies. See the key findings.
blog · bugcrowd.com
Savant Forge: Automated offensive testing to keep pace with AI-generated code
Bugcrowd's Savant Forge combines fuzz testing with symbolic execution to surface real exploitable vulnerabilities in CI/CD pipelines, while Savant Runtime tracks live third-party components in production to support SBOM compliance.
blog · bugcrowd.com
Breaking down the Cyber Strategy for America
The White House Cyber Strategy for America elevates cybersecurity into its own national strategy with six pillars; the author backs the move but warns execution still lags machine-speed adversaries.
blog · bugcrowd.com
Understanding technical debt: The new zero day
Technical debt — shortcuts that compound into complexity, slower delivery and heightened risk — is framed as the new zero day, spanning code, architecture, builds, documentation and infrastructure.
Back