Passwords are still an enormous problem. The Verizon DBIR says stolen credentials cause more breaches than phishing and exploits combined. Now, AI is making these attacks even more effective against modern networks.
In this session, you'll see new research on how attackers use AI to analyze breach data and craft targeted password attacks. We'll explore how decades of breach results combined with agentic AI are accelerating these attacks and how we as defenders can step up our game to keep pace. Join SANS faculty fellow Joshua Wright for Hackventures with Josh, where we remember that security research can be both critical and incredibly fun.
This training is recommended for a diverse range of individuals, including:
- Incident handlers
- Defenders who are on the front lines responding to attacks
- Penetration testers and red team operators
- General security practitioners and security architects who want to stay current with evolving attack techniques
Learning Objectives:
- Understand practical techniques attackers use right now to analyze billions of breached passwords with AI
- Step-by-step guide on integrating massive data sets with limited AI model context windows
- A methodology you can use to test your own environment
- Practical defenses that go beyond "use a password manager"
- Insight into knowing how attackers think about vulnerabilities to achieve their goals
This webcast supports content and knowledge from SEC504: Hacker Tools, Techniques, and Incident Handling. To learn more about this course and explore upcoming sessions, Click Here.
