Source time Edition date
IndustryThe Verge AI
AI broke the cybersecurity world. What’s next?
AI 打破了网络安全世界。接下来会怎样？
Alex Stamos argues the multibillion-dollar security industry is overdue for disruption, a useful tradeoff read on who bears the cost of adapting to AI-boosted attacks.
Judgment
CISOs at AI-cloud vendors and their customers must decide whether to fund continuous breach response and third-party plugin controls now, accepting higher cost and slower releases, or keep relying on perimeter defenses and absorb chained-breach risk.
Basis
Alex Stamos, chief security officer at Cognition, says open-weight models now let attackers automate most of the kill chain: instead of pre-building exploits, AI systems find bugs and write exploits in real time. He cites a reported chain in which Fireworks was breached, API keys were stolen, attackers entered Cursor, and a bad plugin reached 5,000 companies, creating 5,000 potential breaches. He calls the Binance hack the largest heist of anything in human history and mentions ARTEX starting with three South Korean banks. Stamos says defenders have effectively been at DEFCON 2 all October and expects a “dark age” while the industry adapts.
- FireworksAPI keys stolen
- Cursorbad plugin
- 5,000 companies
Unclear The source does not name the 5,000 affected companies, quantify Cursor or Fireworks remediation costs, or specify what regulatory action, if any, follows the reported breaches.
Next Check whether Cursor or Fireworks publishes a post-incident report with the number of affected customers and revoked API keys.