When offensive security knowledge becomes AI training data | IBM

What I expect in the coming years is a gradual shift of serious offensive security work into more closed environments. Not in a cloak-and-dagger sense, but more in keeping with the way certain medical or financial communities have always operated.

The deeper conversations that happen between people who really know the subject matter are moving to more trusted forums: invite-only Slack workspaces, vetted Discord servers, and other small private channels where craftsmanship is shared with the expectation that it won’t be indexed, scraped, or included in the next model release.

You can already see early signs of this shift. Conference sessions where speakers talk about techniques but don’t publish full code releases. The tools will be distributed to well-known operators via closed beta programs instead of ending up on GitHub. Providers who work hard to control who can access their platforms.

I don’t see this as the end of public sharing. The data we all learned when we were new is still…