#027 - Cyber AI Chronicle - The Day the World Learned about Resiliency

PRESENTED BY

Cyber AI Chronicle

By Simon Ganiere · 21^th July 2024

Welcome back!

Project Overwatch is a cutting-edge newsletter at the intersection of cybersecurity, AI, technology, and resilience, designed to navigate the complexities of our rapidly evolving digital landscape. It delivers insightful analysis and actionable intelligence, empowering you to stay ahead in a world where staying informed is not just an option, but a necessity.

Table of Contents

• What I learned this week

  • TL;DR

  • How a (simple) Update Broke (most) of the World

• Worth a full read

  • SAPwned: SAP AI vulnerabilities exposed customers’ …

    • Key Takeaway

  • SolarWinds and its CISO not off the hook over “mat …

    • Key Takeaway

• Research Paper

  • Codexity: Secure AI-assisted Code Generation

• Wisdom of the week

• Contact

What I learned this week

TL;DR

• I’m not going to lie, since the creation of this newsletter there was a few instances where I was like what am I going to write?…same this week. Combined with a busy week at work and a lot of things happening on the personal side and I had nearly zero time to think about this newsletter…then Friday happened 🙃 That CrowdStrike update will for sure stay as an epic failure. I’ll share my thoughts on what it means from a resiliency perspective. Also massive shoot out to all people who had to work to restore their system so their company can be back online. Also, to my friends at Crowdstrike as this is not an easy time for them either. The cyber industry is about people and collaboration especially and the fact that a security vendor had a massive issue should not change that » MORE

• Before that happen there were quite a few other news worthy items during the week. Here are a couple of key items that attracted my attention:

  The Coalition for Secure AI (CoSAI) was announced on the 18^th July. It’s an open-source initiative designed to give all practitioners and developers the guidance and tools they need to create Secure-by Design AI Systems. OpenAI has released a new model GPT-4o mini the most coefficient small model. The model score 82% on MMLU. The model is also 60% cheaper than GPT-3.5 Turbo. Some significant investment in deepfake defense company Pindrop landed a $100M loan to grow its offering.

  In the cyber world, law enforcement arrested a 17-years-old (!) boy suspected of being a member of the notorious Scattered Spider cybercrime syndicate. This arrest seems to be linked to the ransomware attack against MGM Resorts Casino. It seems that Google is about to spend $23 billion to acquire Wiz. A US District Court judge has upheld a securities fraud claim brought by the SEC against SolarWinds and its CISO Tim Brown. However, the judge also rejected the SEC bid to oversee corporate cyber security controls. Pretty curious about the response from the SEC.
  On the geopolitics side, some interesting stats on the fact that since the October 7 the number of attacks against Israel organisation has more than doubled.