Jari Kemppainen

IT Security Pro, PS5 gamer. Lifetime learner.

[Jari Kemppainen @Jake72K]

Not quite there yet.

[Jari Kemppainen @Jake72K]

In future IT Security Pros will monitor the battles of defending AIs vs. the attacking AIs from their real-time SIEMs and hope that their AI will learn and adapt faster than their opponent. #AI

[Dave Kennedy @HackingDave]

Alright, I've stayed away from the Mythos stuff for a little bit. Going to comment on that, but AI as a whole.

First, this AI industry is absolutely insane. I feel like I'm back in the 90s/2000s with innovation, but it's not tempered or methodical - it's pure chaos.

Everyday there is some AI-dude-bro (or gal) clawing for followers claiming end of cybersecurity, end of software engineering, or this breakthrough changes everything. We're seeing the "streamer" effect of video games now exploding in every industry that hasn't been in whatever industry, but is now a AI-expert thus an expert in anything AI touches because they can prompt.

Largely it's not, but what it is doing is requiring us to understand what AI will do to virtually every industry in the future. I'm sitting here right now at a conference I'm presenting at, and I spoke with an individual which was like man... I'm just trying to get through this SAP implementation at my company, I don't even know where to start with AI at the moment.

We are still in the extreme early stages of what AI can do, and I think that's really the exciting part - we are at the infancy stages of this.

Most enterprise can't handle AI, as most companies couldn't handle agile workflow when it came out either, it took time, but eventually adopted.

I won't dive deep into the scalability of releasing AI to the masses based on compute, power, or subsidies because these are real hurdles we need to solve. As you can see with Claude's spike in popularity is causing them to have to dumb the model down upwards of 65% just to stay afloat (Claude is absolutely awful right now for coding - beware).

Mythos is cool, really cool - but it's not earth shattering as claimed. The potential here we are seeing a glimpse of what can actually happen though.

The ability to do extremely complex tasks, with insane context windows, and high-end reasoning. But, what we saw from other current frontier models including open LLMs, they were able to find the same issues, but had to be specifically targeted towards those code sections because of context limitations and complex task reasoning which was drastically improved in Mythos.

What does this mean? Basically. Nothing. It's a lot of marketing hype - but it does prove out that as these models become smarter, it will inevitably produce much better code, be able to work in mind blowing fashions that we haven't seen before - but it will all come down to cost. Right now Mythos is extremely expensive because of the compute needed, and we may solve that over time, but it's not there yet.

The subsidies right now means AI is not ready. Scale is our biggest bottleneck right now and until that's solved, the industry will not move as fast as it could.

What's particularly impressive is how the open models are starting to perform on par (or better) with the frontier models and become way more efficient without restrictions (turboquant) as an example.

Our ability to use near parity models on our own hardware will only continue to get better which is a huge threat for these companies. I at first looked at Cursor's implementation of Kimi as they were falling behind because it wasn't "their own model". That wasn't accurate, its that the open models are performing substantially better than from 6 months ago, and will soon be leading the charge or close to it.

What does this mean for cybersecurity? The industry is changing rapidly, and I absolutely freaking love it. We needed a swift kick in the ass in this industry that was largely stagnant for the past 10-15 years.

What used to be a handful of incredibly talented security researchers that knew systems internals, savants at reverse engineering and reading through millions of lines of ASM is now being afforded to the masses, but still has a long way to go.

The reason AI is so good at doing this stuff is because they paved the way, and will continue to do so in different ways. Not eliminated or removed, enhanced and better than ever. AI is single handedly the largest theft of plagiarism that has ever happened in human history. I just got a 10K check from Claude for ripping off my Metasploit book to train its model to be smarter actually :P

I am all for things that make the world a safer place. Our goal in cybersecurity is to fix the world, make it less harmful when using technology - we should be adopting this. Note that it's going to come with a ton of fluff, hype, doomsday predictions, people that are now AI exports or coding experts but have never written a line of code themselves. That's all to be expected if you have ever been to an RSA conference. AI will product meaningful change in an industry that needed it.

Cybersecurity is much more than bugs or defects, it's protecting against risk. AI is a new emerging risk, it's going to keep us insanely busy right now, and for the foreseeable future.

[Microsoft Security @msftsecurity]

Calling all security learners! Visit the Security hub on Microsoft Learn to:
🛡️ Gain new skills
🛡️ Explore resources by focus area
🛡️ Connect with security-focused communities

Start now: https://t.co/Q710z7lrko

[The Hacker News @TheHackersNews]

🚨 A new Chrome zero-day is already being exploited in the wild.

Discovered by Google TAG on June 25, CVE-2025-6554 lets attackers run malicious code via a crafted web page.

It targets Chrome’s V8 engine—again.

Update now → https://t.co/vgCUJURQQj

[Jari Kemppainen @Jake72K]

One more for the toolbox. Nice.

[Microsoft Threat Intelligence @MsftSecIntel]

Today, Microsoft Threat Intelligence Center is proud to announce the release of RIFT, an open-source tool designed to assist malware analysts automate the identification of attacker-written code within Rust binaries. https://t.co/1CkVjvsd8a

[Infosecurity Magazine @InfosecurityMag]

Canada Bans Chinese CCTV Vendor Hikvision Over National Security Concerns https://t.co/V4DjPYW7LJ

[CNET @CNET]

You can install the iOS 26 developer beta now to test new features before everyone else. https://t.co/EJMxgBhfNP

[The Hacker News @TheHackersNews]

🚨 Attention users! Apple issues patches for 3 new critical zero-day flaws impacting #iOS, iPadOS, macOS, watchOS, and Safari. Stay safe with the latest updates for your devices.

Read details: https://t.co/4H9EHVtMer

#cybersecurity #informationsecurity

[Jari Kemppainen @Jake72K]

Time to update your Apple devices.

[Forbes @Forbes]

Apple's latest iOS update has arrived. Here's what you need to know:
https://t.co/7UJsBzL6kf

[iSoftware Updates @iSWUpdates]

New in #iOS 14.8:
• Security and bug fixes

#iOS148

[F-Secure Consulting @FSecure_Consult]

The #MicrosoftAzure Security Framework has landed. Get your copy of the very first comprehensive guide on how to harden your #Azure platform—inspired by @0xdabbad00’s #AWS security roadmap >> https://t.co/f5rnNgqhkJ
#CloudSecurity #Azure #InfoSec #CyberSecurity

[vixentael 🛡🇺🇦 @vixentael]

The story of my life.

[Jari Kemppainen @Jake72K]

@GreatDismal Michael Moorcock. I would love to see Elric saga as a movie series.

[USCYBERCOM Cybersecurity Alert @CNMF_CyberAlert]

We recommend applying patches as soon as available. This is a far more dangerous #Sudo vulnerability than seen in the rescent past.

[Jari Kemppainen @Jake72K]

Time to update your iPhones folks!

[AppleInsider @appleinsider]

#Apple's latest #iOS14.4 and #iPadOS14.4 updates include fixes for two zero-day security flaws that the company believes may have been used in the wild.
https://t.co/E4u9zQAkiG

[Jari Kemppainen @Jake72K]

@JackPhan Still blond at this age😀

[Jari Kemppainen @Jake72K]

Time to update Chrome again...

[Frederic Perrouin @fredprod]

Two New Chrome 0-Days Under Active Attacks – Update Your Browser https://t.co/mT4KJBXU4e from @TheHackersNews

[Jari Kemppainen @Jake72K]

Keep your phone updated.

[Lorenzo Franceschi-Bicchierai @lorenzofb]

NEW: Hackers have been using mysterious zero-days to exploit iPhones and Android phones and no one wants to talk about it.

Google found and disclosed the "in the wild" bugs, yet it has not revealed any details about who is using them, or against whom.

https://t.co/cuQNgeKB4n

[Microsoft Security @msftsecurity]

Getting started on your Zero Trust approach can feel overwhelming. That’s why we created the Zero Trust Deployment Center—to put planning and implementation resources at your fingertips. https://t.co/c1fVVMCqqo

[Jari Kemppainen @Jake72K]

Well that really doesn’t cut it as Biden got even more legal votes. I guess the people of United States have spoken: You’re fired!

[Donald J. Trump @realDonaldTrump]

71,000,000 Legal Votes. The most EVER for a sitting President!