嗯，用户让我帮忙总结一下这篇文章的内容，控制在一百个字以内，而且不需要用“文章内容总结”或者“这篇文章”这样的开头。直接写描述即可。 首先，我需要通读整篇文章，抓住主要信息。文章是关于Tom Eston采访Andrew Wilson的，Wilson是进攻性AI研究员和博士候选人，之前在Bishop Fox工作过，帮助公司从不到20人发展到近500人。他们讨论了墨西哥的网络安全和AI生态系统，以及进攻性安全如何从“一个人的军队”转变为更专业的角色。 Wilson还提到他的博士研究，模拟专家渗透测试员的认知方法来塑造AI代理。他认为AI降低了进入门槛，但需要验证因为存在幻觉问题。他还预测常规、方法驱动的测试将被自动化，而专家人类工作会继续存在。最后，他预计合规和审计框架将最终接受更客观、可扩展的基于AI的控制验证，重塑渗透测试市场。 接下来，我需要把这些信息浓缩到100字以内。重点包括：采访对象、他的背景、讨论的主题（墨西哥生态系统、安全角色转变）、他的研究、AI的影响以及未来预测。 可能的结构：Tom Eston采访Andrew Wilson，讨论墨西哥网络安全和AI发展、安全角色转变、AI在渗透测试中的应用及未来趋势。 这样应该可以控制在100字以内，并且直接描述内容。 </think> Tom Eston采访了进攻性AI研究员Andrew Wilson，探讨墨西哥网络安全与AI生态系统的增长、安全角色从全能型向专业化转变的趋势。Wilson分享了其博士研究中模拟专家渗透测试员认知方法以训练AI代理的工作，并预测AI将推动渗透测试自动化与合规框架变革。 2026-3-23 04:0:42 Author: securityboulevard.com(查看原文) 阅读量:5 收藏
Tom Eston interviews offensive AI researcher and PhD candidate Andrew Wilson, a former Bishop Fox partner who helped grow the firm from under 20 people to nearly 500, built award-winning AI solutions for SOC modernization, founded Cactus Con, and relocated his family to Guadalajara to open and scale a Bishop Fox office. They discuss Mexico’s growing cybersecurity and AI ecosystem, driven by talent, community events, and government-university partnerships, and how offensive security has shifted from “one-person army” generalists to more specialized roles. Wilson explains his PhD work modeling expert pen testers’ cognitive approaches to shape AI agents, argues AI lowers barriers but requires validation due to hallucinations, and predicts routine, methodology-driven testing will be automated while expert human work persists. He forecasts compliance and audit frameworks will eventually accept more objective, scalable AI-based control validation, reshaping the pen testing market.
If you work in cybersecurity, involved in penetration testing and offensive security, or are just trying to figure out what the AI hype actually means for attackers and defenders, this episode is for you!
** Links mentioned on the show **
Follow and connect with Andrew Wilson
https://www.linkedin.com/in/awilsonaz/
https://x.com/kuzushi/
Find out more about CactusCon!
https://www.cactuscon.com/
** Watch this episode on YouTube **
** Become a Shared Security Supporter **
Get exclusive access to bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today by going to our YouTube channel’s membership section: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/join
** Thank you to our sponsors! **
SLNT
Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”.
** Subscribe and follow the podcast **
Subscribe on YouTube: https://www.youtube.com/c/SharedSecurityPodcast
Follow us on Bluesky: https://bsky.app/profile/sharedsecurity.bsky.social
Follow us on Mastodon: https://infosec.exchange/@sharedsecurity
Join us on Reddit: https://www.reddit.com/r/SharedSecurityShow/
Visit our website: https://sharedsecurity.net
Subscribe on your favorite podcast app: https://sharedsecurity.net/subscribe
Sign-up for our email newsletter to receive updates about the podcast, contest announcements, and special offers from our sponsors: https://shared-security.beehiiv.com/subscribe
Leave us a rating and review: https://ratethispodcast.com/sharedsecurity
Contact us: https://sharedsecurity.net/contact
The post The Real State of Offensive Security: AI, Penetration Testing & The Road Ahead with Andrew Wilson appeared first on Shared Security Podcast.
*** This is a Security Bloggers Network syndicated blog from Shared Security Podcast authored by Tom Eston. Read the original post at: https://sharedsecurity.net/2026/03/23/the-real-state-of-offensive-security-ai-penetration-testing-the-road-ahead-with-andrew-wilson/
如有侵权请联系:admin#unsafe.sh