#017 Cyber AI Chronicle - Not everything has to be AI driven

PRESENTED BY

Cyber AI Chronicle

By Simon Ganiere · 28^th April 2024

Welcome back!

Project Overwatch is a cutting-edge newsletter at the intersection of cybersecurity, AI, technology, and resilience, designed to navigate the complexities of our rapidly evolving digital landscape. It delivers insightful analysis and actionable intelligence, empowering you to stay ahead in a world where staying informed is not just an option, but a necessity.

Table of Contents

• What I learned this week

  • TL;DR

  • Not Everything Has To Be AI Powered

    • Economic Viability Concerns

    • The “Cargo Cult” Mentality

• Worth a full read

  • Five Eyes - Deploying AI Systems Securely

  • Security and Ten Laws of Technology

    • Key Takeaway

• Some more reading

• Wisdom of the week

• Contact

What I learned this week

TL;DR

• I spent some time reading a bit more on the state of the AI market. One of the reasons for this is my belief that whilst AI will change a lot of things (in security and other domains) but currently we are about to reach the peak of inflated expectations. Not everything has to be “AI powered” to be useful in the security space. I’ll explore a couple of key aspects of this and share my view on this.

• It’s RSA in a couple of weeks and I can only imagine that every single vendor will put AI in their product name…for no particular reasons 🙃 

• I really enjoyed reading Phil Venables article on the Security and Ten Laws of Technology. His approach to take key technology laws and apply them to security is really interesting. Far from me the idea to think I can create a new law but I keep mentioning my “Vacuum Law”: if you don’t fill the space…someone will and there is a high chance you will not like how they are filling up this space.

• In the “just another week in cyber” section hope you have applied that advice to patch edge technology vulnerabilities in 24h…if not here is your weekly reminder…thanks to a new round of zero-days targeting Palo Alto and Cisco ASA. Yes I know, I’m repeating myself here but if by now you have not yet adapted your patching strategy to this trend…you might have another problem on your hands soon enough. Don’t believe me? Well even MITRE got impacted by the Ivanti vulnerabilities.