Open Models Will Do Anything: AI Is Speeding Up Attacks | Rob Chapman, ArmorCode

Open Models Will Do Anything: AI Is Speeding Up Attacks | Rob Chapman, ArmorCode

Rob Chapman of ArmorCode joins Joe South on Security Unfiltered.

Rob took the long way into security, from bulletin boards in middle Tennessee to running security for oil and gas companies. Now he says anyone claiming AI isn't speeding up attacks isn't paying attention. Stock open models like DeepSeek push back once, then say okay, sounds good. They get into exploits weaponized within 30 minutes, why most exploitation comes through features and bad config instead of CVEs, why "patch everything in two weeks" isn't a program, and why the only way to keep up with vulnerability response is your own army of bots. Plus their personal AI agent setups, getting the data layer right, and why a year ago nobody wanted AI touching remediation and now everyone does.

Chapters
00:00 Rob Chapman joins Security Unfiltered
02:03 A meandering path into cybersecurity
03:41 Wireless security and the mentor who tapped him
05:02 Running security for an oil and gas company
06:09 From opera singer to security: no straight path
07:57 Healthy paranoia and the onsite pen test
10:26 Curiosity is the security mindset
11:43 Weaponized in 30 minutes
13:14 All hands on deck: zero days and the aftermath
15:08 Attackers really are using AI now
15:47 Challenge your assumptions
16:20 Exploits come through features, not CVEs
16:59 Don't be the lowest hanging fruit
18:03 Agents everywhere and how fast this moves
19:43 Open models will do just about anything
21:17 Finding volume and "patch it in two weeks"
22:31 Local models, a Mac mini and Grok Bot
26:28 Agent setups at work and at home
29:13 A bot that builds, launches and scans its own site
30:59 Scaling defenders with AI
32:49 It's never been more exciting to build
36:47 Getting the data layer right
38:28 AI is not some exotic alien
39:06 Vulnerability response needs an army of bots
41:05 A year ago "not a chance," now "do that"
43:03 Tokens, orchestration and what's exposed
44:30 Vendor lock-in and AI business models
45:15 Where to find Rob

ArmorCode: https://www.armorcode.com/
Rob Chapman: https://linkedin.com/in/rschapman
Rob's site: https://rschapman.com/

Subscribe: https://www.youtube.com/@securityunfilteredpodcast
Show site: https://www.securityunfiltered.com

Affiliates
➡️ OffGrid Faraday Bags: https://offgrid.co/?ref=gabzvajh
➡️ OffGrid Coupon Code: JOE

➡️ Unplugged Phone: https://unplugged.com/
Unplugged's UP Phone - The performance you expect, with the privacy you deserve. Meet the alternative. Use Code UNFILTERED at checkout

*See terms and conditions at affiliated webpages. Offers are subject to change. These are affiliated/paid promotions.

Tesla Referral Code: https://ts.la/joseph675128

Follow the Podcast on Social Media!

Instagram: https://www.instagram.com/secunfpodcast/
Twitter: https://twitter.com/SecUnfPodcast
Rob Chapman, ArmorCode, security unfiltered, joe south, ai security,