Every security company imaginable is going to exaggerate any opportunity to point to AI in their marketing, but I'm not sure I'd say it's an outrageous prospect to think that attackers aren't leveraging it?

mitsloan.mit.edu/ideas-made-t...

And so is this:

Yeah as I thought about it, it would depend on SMB signing and whatnot. Thanks!

This is awesome! I did not know of that arbitrary delete LPE until this. I wonder if you could you simply do an ntlmrelayx SOCKS proxy to gain a session instead of this? If it would work, that could be relayed back to the host to achive RCE.

Not sure what this talk was from, but any chance it was recorded?