KaliBench, 8,504 query-command pairs across 1,642 Kali tools, found no open-weight model among 24 configurations topped 42% exact-command accuracy. Scores rise when the model is handed the tool name, but production analysts describe only intent.
Reality
- Evidence40
- Adoption
- Insufficient
- Hype gap+10
- Incentives
- Insufficient
- Confidence40
A developer scanned their own MacBook from a second machine on the same network. The parts macOS ships were invisible; the exposure that stayed open was the dev servers they had left running, wider than they thought.
Reality
- Evidence50
- Adoption
- Insufficient
- Hype gap+5
- Incentives65
- Confidence55
A full attack chain against a self-hosted lab shows a clean split: reconnaissance that never authenticates logs nothing, while every login attempt and HTTP request produces correlated alerts.
Reality
- Evidence40
- Adoption
- Insufficient
- Hype gap0
- Incentives60
- Confidence45
An SC Media column prices the old deterrent at three hours of attacker research per target and argues the tooling has removed it, which leaves headcount doing no useful work inside a targeting model.
Reality
- Evidence26
- Adoption38
- Hype gap+36
- Incentives58
- Confidence55
ONUS routes five numeric fields through one deterministic function and leaves its local Qwen 7B to write prose. The case for that line is a failure-mode argument, not a trust one.
Reality
- Evidence52
- Adoption16
- Hype gap−8
- Incentives58
- Confidence46
DEF CON Franklin and the NRWA are funding small-utility defense with philanthropy and volunteer labor, not appropriations. The arithmetic decides who actually gets helped.
Reality
- Evidence24
- Adoption14
- Hype gap+38
- Incentives58
- Confidence28