Cybersecurity

5650 readers

110 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Be respectful. Everyone should feel welcome here.
No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
No Ads / Spamming.
No pornography.

Community Rules

Idk, keep it semi-professional?
Nothing illegal. We're all ethical here.
Rules will be added/redefined as necessary.

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]

Notable mention to [email protected]

founded 1 year ago

MODERATORS

kid

[email protected]

Why Pay A Pentester? (thehackernews.com)

submitted 1 month ago by [email protected] to c/cybersecurity

4 comments fedilink hide all child comments

What do you guys think? I don't think there's a lot of depth to the arguments, myself. It reads more like an threadbare op-ed with a provocative title. But I'd like to hear you opinions on the impact of automated testing solutions on the role of pen-testers in the industry.

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 3 points 1 month ago

While the broader cybersecurity field has seen rapid advancements, such as AI-driven endpoint security

Ya, about that "AI-driven endpoint security", it does a fantastic job of generating false positives and low value alerts. I swear, I'm to the point where vendors start talking about the "AI driven security" in their products and I mentally check out. It's almost universally crap. I'm sure it will be useful someday, but goddamn I'm tired of running down alerts which come with almost zero supporting evidence, pointing to "something happened, maybe." AI for helping write queries in security tools? Ya, good stuff. But, until models do a better job explaining themselves and not going off on flights of fancy, they'll do more to increase alert fatigue than security.