Sweet Security Launches Agentic AI Red Teaming to Counter 'Mythos Moment'

"The Mythos Moment can be defined as the moment when industry fully realized that human security has no chance of matching the speed and volume of AI-assisted cyberattacks. The CSA responded to the Mythos Moment with advice in The 'AI Vulnerability Storm': Building a 'Mythos-ready' Security Program. It wrote, "Introduce AI agents to the cyber workforce across the board enabling defenders to match attackers' speed and begin closing the gap.""

"This is good advice if you can do it. From within the thousands of vulnerabilities being found, only some will be relevant to any one environment, and even fewer will be exploitable within that configuration. These are the vulnerabilities that need to be remediated fast - the rest can be safely ignored (at least for the time being)."

"The difficulty is finding and fixing exploitable vulnerabilities while keeping pace with the new vulnerabilities being continuously discovered or introduced. Agentic AI Red Teaming offers a theoretical solution but would require a deep knowledge of each infrastructure concerned. Frontier models are brilliant generalists, but they don't know individual clouds. So, an agentic system must be designed specifically for its user's own environment. Security teams then have the additional problem of maintaining the agents' contextual knowledgebase."

"Sweet explains. "Since day one, Sweet has been indexing runtime data directly from inside our customers' environments: runtime topology, unencrypted Layer 7 exposure, deployed source code, identity paths, and live application behavior," Sweet explains. "That index is the substrate the agent reasons over. A frontier model on its own can hypothesize about an environment; Sweet Attack knows the environment."

The Mythos Moment marks when industry recognized that human security cannot keep pace with AI-assisted cyberattacks. Guidance recommends introducing AI agents across the cyber workforce so defenders can match attackers’ speed and reduce the gap. Effective remediation depends on identifying exploitable vulnerabilities relevant to a specific environment, while ignoring non-relevant issues temporarily. The challenge is fixing exploitable vulnerabilities quickly as new vulnerabilities appear. Agentic AI red teaming could help but requires deep infrastructure knowledge. Frontier models generalize but do not understand individual cloud environments, so agents must be designed for each user’s environment and supported by maintained contextual knowledge. Sweet Security proposes continuous automated agentic red teaming using an indexed runtime substrate from customer environments, enabling reasoning grounded in the specific environment rather than generic hypotheses.

Read at SecurityWeek