
In 2023, screenshots of a chatbot called WormGPT began circulating across cybersecurity forums, Reddit threads, and YouTube videos. The claims were dramatic. An AI tool with no restrictions. A chatbot allegedly capable of writing phishing emails, generating malicious scripts, and automating cyber scams. Soon after, another name entered the conversation, DarkGPT. Within months, the internet […]
Cybersecurity has always been a step ahead game. Defenders build controls, attackers find gaps, and the cycle continues. But something changed over the last couple of years. The rules of that game are no longer the same. Organizations spent years strengthening firewalls, patching vulnerabilities, and deploying endpoint protection. Yet, despite these investments, breaches are not […]
Last month, I discovered something that stopped me cold during a routine penetration test. A developer had spun up an Ollama server to experiment with local AI models. Nothing unusual about that, except the server was publicly accessible with no authentication. The models it hosted had been trained on internal company data. This scenario plays […]