

A place I worked at fell for this AI marketing doomerism around vulnerabilitues hook line and sinker. The tool lit up the organisation’s infrastructure like a Christmas tree labelling thousands of configuration issues and potential exploits, yet only a tiny fraction of was ever truly exploitable from the open internet. Millions blown on this junk and hundreds of hours wasted triaging meaningless reports all to appease an LLM that doesn’t know jack shit about threat modelling. But hey executives said scary number went down and that’s good right?

I would argue it was before that when they sold out to cryptobros during the 30 series, and coming up with the xx90 cards to see just how much people would spend. You could even consider it a corruption soft launch to test the waters with regulators.