Saan Vandendriessche

Cyber security evangelist. Threat & vulnerability mgmt. Independent consultant. Views are my own.

[Florian Roth ⚡️ @cyb3rops]

I think AI coding hype follows roughly four stages:

1. Amazement

You try it and can’t believe how much code it generates from a few prompts.

2. Expansion

You start more and more projects because shipping suddenly feels cheap and fast.

This is also the phase where people start convincing everyone around them:

- coworkers
- management
- friends in other companies

because nobody wants to “fall behind” in 6–12 months.

That creates a massive snowball/FOMO effect.

3. The grind phase

You realize the generated code has architectural issues, sloppy mistakes, weird abstractions, duplicated logic, broken edge cases, etc.

So you start:

- re-prompting
- switching models
- increasing reasoning effort
- reviewing fixes
- generating fixes for previous fixes

And suddenly you spend your days reviewing AI-generated pull requests instead of building software.

4. Realization

You realize AI coding increases output much faster than it increases certainty.

The code still needs:

- review
- testing
- ownership
- architectural understanding
- long-term maintenance

Usually by expensive senior engineers.

And the interesting thing is:
this whole cycle can take many months or even more than a year because people become socially and professionally invested in the narrative themselves.

Once teams, managers, and entire companies have been convinced that this is the future, it becomes psychologically and politically very hard to later say:

“Actually, the ROI is much lower than we expected.”

[James Kettle @albinowax]

I'm thrilled to announce "Can AI Do Novel Security Research? Meet the HTTP Terminator" will premiere at @BlackHatEvents #BHUSA! Check out the abstract:

[SANS.edu Internet Storm Center @sans_isc]

SANS Stormcast Friday, August 8th, 2025:: ASN43350 Mass Scans; HTTP1.1 Must Die; Hyprid Exchange Vuln; Sonicwall Update; https://t.co/lYdIgqOHbl Research: OSS Security and Shifting Left
https://t.co/wYaEEPNsqg

[Saan Vandendriessche @Saanv]

@BartholomeusBe Top!

[Alex Simons @Alex_A_Simons]

Today's news is big: We're expanding Microsoft Entra to include an identity aware Security Service Edge to help you protect any identity and secure access to any resource. Learn more: https://t.co/yu69cAzJHy #MicrosoftEntra #IAM #SSE

[Alex Simons @Alex_A_Simons]

Azure AD is getting a new name: Microsoft Entra ID. The licensing and capabilities you’re familiar with remain the same. Learn more: https://t.co/3qUUJkz79X #AzureAD #IAM

[SANS.edu Internet Storm Center @sans_isc]

Powershell Profiles; Honeypot Activity; More flaws in MOVEit and Fortinet SSLVPN
https://t.co/6jBmKSaj9Y

[Vasu Jakkal @vasujakkal]

Defenders, meet Microsoft Security Copilot, a product that will shift the balance of power into our favor by using AI in a secure, compliant way. Security Copilot will empower human defenders to move at the speed and scale of AI.

[Microsoft Security @msftsecurity]

#MSSecure is now live! 💻
Tune in for our opening keynote with Vasu Jakkal and Charlie Bell to discover what an AI-powered future means for cybersecurity: https://t.co/7zu6XGdXep

[SANS.edu Internet Storm Center @sans_isc]

Apple released updates for "everything" (macOS, iOS, iPadOS, tvOS, watchOS...). Security content isn't known, but you should likely try to update your devices sometime this week.

[Jan Bakker @janbakker_]

Meet: Authenticator Lite 😍

https://t.co/8tlcNs40mN

[Microsoft Security Response Center @msftsecresponse]

Security Updates for March 2023 are now available! Details are here: https://t.co/fkfJhV34EE

[SwiftOnSecurity @SwiftOnSecurity]

If you RDP to IP addresses instead of home names you are very naughty 🫨. Do you know why?

[Fabian Bader @fabian_bader]

If you want to force the best #MFA method as default on each sign-in you can now test "System-preferred multifactor authentication" in #AzureAD

https://t.co/NrI16ggTHO

1/2

[Years Progress @YearsProgress]

▓▓░░░░░░░░░░░░░ 11%

[Alex Simons @Alex_A_Simons]

Today's big news: Azure AD Cross-Tenant Sync is now in public preview. Rich support for mergers & acquisitions and complex org structures in Azure AD! https://t.co/bu57TAxwvx

[Eric Geller @ericgeller]

It's the two-year anniversary of @Bing_Chris breaking the news of Russia's SolarWinds cyber espionage campaign: https://t.co/ULVSDaiG9G

Biden's first big cyber crisis began a month before he took office.

[Sysinternals @Sysinternals]

A new update with Process Explorer and Sysmon has now been posted!

Get the tools at https://t.co/zlch58Hcfi

See what's new on the Sysinternals Blog: https://t.co/oPT8i0qk5a

[Saan Vandendriessche @Saanv]

@8500Kortrijk /@rvdb8500 @VincentVQ - bel me gerust even op hé!😉 "Kortrijk kan geen geschreven plan voorleggen bij cyberaanval" | Focus en WTV https://t.co/DZdphSKHpj