#039 - Cyber AI Chronicle - AI Safety vs. AI Security

PRESENTED BY

Cyber AI Chronicle

By Simon Ganiere · 13^th October 2024

Welcome back!

Project Overwatch is a cutting-edge newsletter at the intersection of cybersecurity, AI, technology, and resilience, designed to navigate the complexities of our rapidly evolving digital landscape. It delivers insightful analysis and actionable intelligence, empowering you to stay ahead in a world where staying informed is not just an option, but a necessity.

Table of Contents

• What I learned this week

  • TL;DR

• AI Safety and AI Security

  • Defining AI Safety and AI Security

  • The Crucial Overlap

  • Red Teaming: Testing Both Safety and Security

  • The Need for a Holistic Framework

  • Key Steps to Manage AI Safety and Security

  • Moving Forward

• Worth a full read

  • OpenAI: An update on disrupting deceptive uses of …

  • A different take on security incident response, pi …

    • Key Takeaway

• Wisdom of the week

• Contact

What I learned this week

TL;DR

• AI safety and AI security are two sides of the same coin. One is taking care of the harm generated by the AI and the other the harm to the AI…they are, however, heavily linked to each other. Taking a holistic approach and considering both dimensions is a key success factor in AI risk management » READ MORE

• Another week in cyber security with its lot of usual news. Hopefully after all of this time, your vulnerability management and patch management processes are top notch and you can deal effortlessly and easily with the multiple zero-days and CVEs released this week: from Microsoft (a lovely 117 CVEs including zero day), to Palo Alto, to Firefox via Adobe…The CISA KEV list has been updated with 6 CVE being actively used…except for 1 related to Qualcomm all of the rest is no surprise: edge technology (Ivanti and Fortinet) and Microsoft.
  In the “stating the obvious” category, we have Microsoft highlighting that file hosting services are being used by threat actors. Nothing really new from my experience, but still worth a read. Learned a new acronym on the way: living-off-trusted-sites (LOTS).

• On the positive side: Ukraine police arrest hacker for operating illegal VPN service to access sanctioned Russian sites. Also the suspected Bohemia dark web marketplace admins arrested by Dutch and Irish police.

• Remember that bad news travel faster than good news and whilst the world of cyber news read like a disaster it has also made significant progress in the last 10 years!