AI Security Testing - Most AI Attacks Are Noise, A Few Leave Craters
Security Boulevard, Friday, January 16th, 2026
Assessing the potential blast radius of AI security failures AI security failures tend to fall into two distinct risk regimes: one dominated by constant, low-impact noise, and another defined by rare but devastating events capable of reshaping an organization.
This distinction matters, because each regime demands a fundamentally different defensive mindset.
The first regime consists of high-volume, low-impact attacks - jailbreak attempts, malformed prompts, probing inputs, and model edge-case abuse. These events occur constantly and their impacts vary, but rarely catastrophically. Taken together, they resemble an approximately log-normal distribution: many small deviations, a few moderate ones, and very few that matter much on their own.