Why are hackers ignoring AI?
Source: YouTube · Zack Korman · published Mar 10, 2026 · 17:24
The video explores why widespread AI agent breaches haven't occurred yet despite the technology's clear vulnerability to misuse. It suggests that while adversaries are actively researching exploitation methods, their operations teams are currently occupied with existing intelligence requirements 0:19.
Key Takeaways:
• AI agents present a massive attack surface, as even amateur researchers have easily discovered methods to cause significant harm 0:00.
• Both adversaries and defenders are learning about AI security in real-time, leading to a concurrent race to understand the ecosystem 0:15.
• Nation-state threat actors have dedicated research groups exploring AI, but their operational teams are currently busy with established priorities like monitoring specific geopolitical regions 0:22.
• The lack of immediate attacks is attributed to operational backlogs and "priority intelligence requirements" rather than a lack of potential capability 0:33.
The current lull in AI-driven attacks is likely temporary as research matures and adversaries integrate these tools into their workflows.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
I'm not a particularly great threat actor or threat researcher and yet I found a million ways to do horrible things with AI agents. We have not seen that many AI agent related breaches and attacks yet. Why do you think that is? As much as we are learning about it right now live, so are the adversaries. If you're a nation state threat actor, you have a research group. You have people whose job it is is to sit down and figure out how can I take advantage of this ecosystem. Meanwhile, your operations people are busy running your operations. They're something called Ps, priority intelligence requirements. They're sitting down and they're saying, "Okay, I need to know what is happening in the Middle East. They have a backlog of items." As much as I want to joke about this, part of it might just…