Kevin Mandia
① 他说过的话
16 条
我不想错过 AI 的换班时刻——我在安全领域干了 30 年，而这整个该死的行业即将发生巨变。
指向原始笔记的链接
I don’t want to sit out the AI shift change when I’ve done 30 years in security and the whole damn thing’s about to change.
—— Kevin Mandia · [00:22]
AI 在一微秒内做到的事，需要 70 个人来做。
指向原始笔记的链接
What AI does in a microsecond would take 70 humans.
—— Kevin Mandia · [00:28]
那就是有 25,000 个智能体协同行动，全部一起工作，做着非常非常聪明的事情，而不会陷入荒唐的盲目撒网。
指向原始笔记的链接
Which is there’s 25,000 agents on concert, all working together, doing really, really smart things without going on bizarre fishing trips.
—— Kevin Mandia · [05:29]
但区别首先在于，AI 能做到的规模让人类望尘莫及，大到人类甚至无法理解的程度。
指向原始笔记的链接
But the differences are, first and foremost, the scale of what AI can do dwarfs humans, like in ways humans don’t even get.
—— Kevin Mandia · [06:13]
开放模型已经足够好了，这些东西现在就在到来。
指向原始笔记的链接
The open models are already good enough and these things are coming now.
—— Kevin Mandia · [07:15]
一旦你能匿名获得 GPU，你就会看到多得多的犯罪攻击。
指向原始笔记的链接
The minute you have anonymous availability of GPUs, you’ll see far more criminal attacks.
—— Kevin Mandia · [07:21]
无论如何，就攻击的差异和我们目前所看到的而言，我们正处在 AI 主导的攻击即将到来的临界点上，还只是第一局。
指向原始笔记的链接
And so anyway, the difference in attacks and what we’re seeing now, we are at the precipice, first inning still, of AI-led attacks coming.
—— Kevin Mandia · [07:42]
技术较差、原本不太成功的攻击者，会显得成功得多。
指向原始笔记的链接
Less technical, less successful, are gonna appear way more successful.
—— Kevin Mandia · [10:22]
除非你有一个强大的进攻来对抗，否则你谈不上有防御。
指向原始笔记的链接
You don’t have a defense unless you have a great offense to go up against.
—— Kevin Mandia · [11:29]
你在未来的 AI 时代真正想要的，是模型持续攻击你的压力，但你不能一直这么做。
指向原始笔记的链接
What you really want in the future in the AI age is you want the constant pressure of models attacking you, but you can’t do it all the time.
—— Kevin Mandia · [13:00]
我能告诉你的是，Armiden 自今年 2026 年 1 月以来，我们在客户站点发现了超过 90 个零日漏洞，全部在生产环境中。
指向原始笔记的链接
And it’s like, all I can tell you is Armiden since January of this year, in 2026, we have found over 90 zero days at customer sites, all in production.
—— Kevin Mandia · [17:07]
我们是来自互联网的黑盒攻击，针对大型软件公司发现了超过 90 个零日漏洞。
指向原始笔记的链接
We are black box coming from the internet over 90 zero days in major software companies.
—— Kevin Mandia · [17:53]
红队测试和渗透测试的区别在于，在我看来渗透测试只是一种卫生步骤。
指向原始笔记的链接
And the difference between red teaming and pen testing is pen test to me is a hygiene step.
—— Kevin Mandia · [18:36]
我宁愿要一个糟糕的补丁阻止坏人进来。
指向原始笔记的链接
I’d rather have a bad patch stopping a bad guy from getting in.
—— Kevin Mandia · [20:17]
你知道的，我可以这么告诉你：如果你在检测和响应环节中还有人工参与，你会太慢。
指向原始笔记的链接
You know, over time, I can tell you this, if you have humans in the detect and respond loop, you’re going to be too slow.
—— Kevin Mandia · [22:18]
除了你的客户基础为你疯狂叫好之外，没有任何别的东西能让你差异化。
指向原始笔记的链接
There is nothing else that’ll differentiate you other than your customer base raving about you.
—— Kevin Mandia · [46:42]
② 出现在这些集
1 集
- 《当网络攻击从人类速度变成机器速度，防御也必须自动化》 — 作为联合主持
③ 他谈到的
点进去有真内容 —— 本页主要出口
David George · Armiden · Mandiant · 智能体 · 零日漏洞 · 红队测试 · 渗透测试 · 自主防御 · 开源模型 · 护栏