GLM-5.2: The real security risk? Plus: Vibe hunting, the end of CVSS and updates on Lightwell

Summary

En este episodio, exploramos la rápida evolución de los modelos de IA de código abierto, como GLM-5.2, y cómo su capacidad, a veces comparable con modelos tipo Mythos, está transformando la ciberseguridad. Analizamos la nueva directiva de CISA que sustituye las puntuaciones CVSS por un modelo más dinámico de cuatro variables y discutimos el fenómeno del 'vibe hunting' en el contexto de la automatización defensiva. Finalmente, Brent Holden de Red Hat nos actualiza sobre el estado de Lightwell, una iniciativa diseñada para asegurar la infraestructura de software de código abierto frente a las crecientes amenazas modernas.

Topics covered

• Capacidades de los modelos de código abierto
• Riesgos del modelo GLM-5.2

+7 more topics (full content when you follow the channel)

Transcript excerpt

Open-weight models are reportedly reaching Mythos-level capabilities in at least some domains. Panelists, how is that making you feel? EvilMog, we'll start with you. I mean, these models are getting scarier and scarier all the time, which makes my life easier because the real legitimate models are adding more and more classifiers, preventing use even within the cyber verification programs. Same sentiments of a little scared, a little excited. I think, it's pretty exciting to see what people are able to come up with, and it's a little bit frightening to know that people are going to be able to have these capabilities without having to run them anywhere. People who are benefiting the most are probably the hardware providers. Hello, and welcome to Security Intelligence, IBM's weekly cybersecurity podcast, where our expert panelists turn the biggest industry news stories into practical takea…