Proof-of-Concept Stage

CF: We haven’t seen any attacks with ChatGPT at the root, but is that likely to change pretty quickly?

DS: I would still characterize it as proof of concept. The threat actors have a new technology and they’re trying to figure out how to incorporate it into their attack patterns and how to weaponize it. And so I would still say that what we’re seeing now is more proof of concept than part of the regular playbook the threat actor is utilizing. That will change quickly and without notice. So to be proactive about it is really what defenders need to do to the best of their capabilities and make sure that their vendors are being proactive about it as well.