#043 - Cyber AI Chronicle - Security's Mid-Life Crisis?

In partnership with

PRESENTED BY

Cyber AI Chronicle

By Simon Ganiere · 10^th November 2024

Welcome back!

Project Overwatch is a cutting-edge newsletter at the intersection of cybersecurity, AI, technology, and resilience, designed to navigate the complexities of our rapidly evolving digital landscape. It delivers insightful analysis and actionable intelligence, empowering you to stay ahead in a world where staying informed is not just an option, but a necessity.

Table of Contents

• What I learned this week

  • TL;DR

• Security's Mid-Life Crisis: An Industry at a Cross …

  • The Foundation Was Built on Questionable Data

  • Security Failures Don't Have the Impact We Think

  • Tool Sprawl is Out of Control

  • The Business Perspective Gap

  • The Prevention vs. Response Debate

  • The Way Forward

    • Redefine Security's Role

    • Embrace Empirical Decision Making

    • Build Real Partnerships

  • Conclusion

• Worth a full read

  • Global State of API Security

    • Key Takeaway

  • How data breaches affect stock market share prices

    • Key Takeaway

• Wisdom of the week

• Contact

What I learned this week

TL;DR

• I have a pretty basic system to track down the articles I'm reading during the week so I can use them to create this very newsletter. Looking back at my list, I started to notice quite a few articles related to the struggles of the security teams. This week deep dive is a summary of those articles based on experts in the field sharing their insights. Let me know what you think? mid-life crisis or part of the normal maturity of the industry? » READ MORE

• The AI world is still moving at high speed:

  • The search space is going through a new cycle. With SearchGPT last week, this week we have META announcing they are working on their own AI powered search engine. I’m not sure how Google is feeling about this but for the company that created the core technology used in LLM, is sitting on a treasure trove of data (the Google index), and is now facing harsh competition on their main product (search)…well it’s not looking great.

  • META is also making Llama available to U.S. government agencies and contractors working on national security applications. I mention this previously, AI will have a huge impact on geopolitics.

  • OpenAI acquired chat.com for $15.5 million, the full story from the seller is here.

• In the good news for cyber security:

  • An international coalition of police agencies conducted a major operation that resulted in the takedown of 1,037 servers and other infrastructure operating on 22,000 IP addresses. This effort targeted online scams, phishing schemes, and ransomware distribution, leading to the arrest of 41 individuals » READ MORE

  • The Cybersecurity and Infrastructure Security Agency’s (CISA) secure-by-design pledge, now six months in, has pushed major software firms to improve security. The pledge includes goals like expanding multifactor authentication, removing default passwords, and enhancing vulnerability reporting » READ MORE

  • The FBI said in 2023 that business email compromise accounted for $2.9 billion in losses. Therefore any initiative to disrupt such type of attack is a big win, it was announced this week that a Nigerian national got a 10-year sentence for stealing $20 million through business email compromise scams » READ MORE