One does not simply defend agentically

Summary

The article argues that offensive cyber problems are mostly technical, while defensive problems are mostly organisational and political, so defenders cannot deploy agentic AI the way attackers can. It says defenders should explicitly address these constraints rather than mimic attackers' use of agentic tooling. It references CETAS's work on Autonomous Cyber Defence, commissioned by the NCSC.

Topics

• AI agents