#013 - Cyber AI Chronicle - How to think about AI risk management

PRESENTED BY

Cyber AI Chronicle

By Simon Ganiere · 31^st March 2024

Welcome back!

Project Overwatch is a cutting-edge newsletter at the intersection of cybersecurity, AI, technology, and resilience, designed to navigate the complexities of our rapidly evolving digital landscape. It delivers insightful analysis and actionable intelligence, empowering you to stay ahead in a world where staying informed is not just an option, but a necessity.

Table of Contents

• What I learned this week

  • TL;DR

  • Unpacking AI Risk & Governance - Episode #1

• Worth a full read

  • ShadowRay: First Known Attack Campaign Targeting A …

    • Key Takeaway

  • Key AI Trends and Risks in the ThreatLabz 2024 AI …

    • Key Takeaway

• Some more reading

• Wisdom of the week

• Contact

What I learned this week

TL;DR

• Never thought that killing that Netflix subscription at Christmas will actually lead to start Project Overwatch! I created this newsletter 3 months ago as a way to keep me honest with my learning. From where i’m sitting, it’s 100% working! Truly appreciate all of the feedback and encouragement i’m receiving! and obviously keep them coming!

• An attentive reader pinged me on the back of last week newsletter. Highlight one more additional nasty scenario that can occur with API. Basically saying you can embed malicious prompt into API request so it’s being “executed” once that data is retrieved. Very much aligned to the ComPromptMized scenario.

• AI workload is coming under attack. Not a big surprise if I’m being honest. Encourage you to check the article on Ray vulnerability…and well if you are using Ray…you know what you have to do!