#032 - Cyber AI Chronicle - Copilot: Compounding on Security Challenges?

PRESENTED BY

Cyber AI Chronicle

By Simon Ganiere · 25^th August 2024

Welcome back!

Project Overwatch is a cutting-edge newsletter at the intersection of cybersecurity, AI, technology, and resilience, designed to navigate the complexities of our rapidly evolving digital landscape. It delivers insightful analysis and actionable intelligence, empowering you to stay ahead in a world where staying informed is not just an option, but a necessity.

Table of Contents

• What I learned this week

  • TL;DR

  • Microsoft Copilot Security Features: Addressing Re …

    • Data Access and Permissions Management

    • Data Privacy and Compliance

    • Data Handling and Encryption

    • Security and Compliance Checks

    • Responsible AI Practices

    • Threat Protection and Abuse Monitoring

  • Compounding on Security Challenges?

• Worth a full read

  • Palo Alto - Incident Response 2024 Report

    • Key Takeaway

  • Global 2000: Industry Titans Battle the Beast of S …

    • Key Takeaway

  • Compromising LLMs at large scale

    • Key Takeaway

• Some more reading

• Wisdom of the week

• Contact

What I learned this week

TL;DR

• This week, we delve into the security features of Microsoft Copilot, highlighting how its data access controls, encryption protocols, and compliance checks are setup and what they cover. It does, however, still raise significant questions on the implication of existing security challenges in organisation and how Copilot will compound those » READ MORE

• I somehow ended up reading some more strategic articles. Including a couple that questioned the role of cyber security and the current approach. I truly believe that the role of the CISO will need to evolve significantly in the coming years and to focus more and more on resilience and ensuring the business can sustain all of the external threats (cyber and non-cyber). The CISO is dead! Long live the Chief Resilience Officer. Obviously, thought-provoking reads so i’m curious to understand other people’s view on it so feel free to comment or share your views.

• I like the weekly SentinelOne blog post name “The Good, the Bad and the Ugly in Cybersecurity”. As for once it’s also highlighting some of the good and progress made! Also a fresh reminder that we can all go chase down this APT but basic scams and frauds are still the type of attacks that generate the biggest monetary loss and impact on society at large.

• I’m a big fan of Daniel Miessler and can only recommend to subscribe to his newsletter but also checked out the tools he released. I have already mentioned several time Fabric, which I’m using daily. Check out the latest version as it moves to Go rather than Python - simpler install and less dependency management. He released some interesting new tool recently as well: Substrate and Harness.