The Cyber Defense eMagazine January Edition for 2024

More documents

Recommendations

Info

Four Ways Genai Will Change the Contours of The Corporate Landscape In 2024 By Neil Serebryany, CEO and Founder of CalypsoAI Generative artificial intelligence (GenAI) models, including large language models (LLMs) have been the focal point of the business world’s attention since ChatGPT made its debut just a year ago. They have revolutionized operational practices across sectors, from streamlining supply chains to enabling unique, detailed customer interactions. While not quite ubiquitous yet, this technology is getting closer to that milestone every day, and its potential for innovation is boundless. It’s clear these models and their other GenAI cousins are poised to reshape the corporate landscape even further. Here are some ways I anticipate they will do so in the upcoming year. • The first large-scale breach of a foundation model provider, such as OpenAI, Microsoft, Google, etc., will happen in the upcoming year and will lead to a large-scale security incident. The scope and scale of the attack itself will be on par with recent incidents, such as Microsoft’s “accidental” disclosure of 38 terabytes of private data and Google Fi’s hack that exposed the data of 38 million customers. With the amount of sensitive information that has been sent to LLMs like ChatGPT, the fallout would be profound and could easily exceed either of those Cyber Defense eMagazine – January 2024 Edition 138 Copyright © 2024, Cyber Defense Magazine. All rights reserved worldwide.
in terms of reputational, operational, and financial damage. The damage inflicted by such a breach would not stop at the company boundaries, but would create a ripple effect across the AI ecosystem as organizations that had relied on the model(s) would need to immediately go into damage control mode. Abruptly ceasing to use the model(s) would affect applications that require it and security teams would have to investigate, reassess, and possibly recreate or replace elements of the organizational security infrastructure. Explaining their accountability to their own shareholders and customers would be a painful exercise for executives, and come with its own set of consequences. • An enterprise embracing GenAI is going to have a permissioning breach due to multiple models at play and a lack of access controls. As a company layers in external base models, such as ChatGPT, as well as models embedded in SaaS applications, and retrieval-augmented generation (RAG) models, the organizational attack surface expands, the security team’s ability to know what’s going on (observability) decreases, and the intense, perhaps even giddy, focus on increased productivity overshadows security concerns. Until, that is, a disgruntled project manager is given the access to the new proprietary accounting model that the payroll manager with a similar name requested. Depending on the level of disgruntlement and the personality involved, company payroll information could be shared in the next sotto voce rant at the coffee machine, in an ill-considered all-hands email, or as breaking news on a business news website. Or nothing will be shared and no one will notice the error until the payroll manager makes a second request for access. Whatever the channel or audience, or lack thereof, the company has experienced a serious breach of private, confidential, and highly personal data, and must address it rapidly and thoroughly. The AI security team’s days or weeks will be spent reviewing and likely overhauling the organization’s AI security infrastructure, at the very least, and the term “trust layer” will become a feature of their vocabulary. • Data science will become increasingly democratized thanks to foundation models (LLM usage). The speed and power of LLMs to analyze and extract important insights from huge amounts of data, to simplify complex, time-consuming processes, and to develop scenarios and predict future trends has already begun to bring big-data analytics into the workflow of teams and departments in all business functions. That will continue to scale up dramatically. Across an organization, teams will increasingly be able to rapidly generate data streams tailored to their specific needs, which will streamline productivity and expand the institutional knowledge base. Humans will not be out of the loop, however, as I do not foresee models’ propensity to make stuff up being resolved any time soon, although fine-tuning is showing some benefits in that area. • Increasingly new and novel cyberattacks created by offensive fine-tuned LLMs like WormGPT and FraudGPT will occur. The ability to fine-tune specialized models quickly and with relative ease has been a boon to developers, including the criminal variety. Just as models can be trained on a specific collection of financial data, for instance, models can also be trained on a corpus of malware-focused data and be built with no guardrails, ethical boundaries, or limitations on criminal activity or intent. As natural language processing (NLP) models, these tools function as ChatGPT’s evil cousins, possessing the same capabilities for generating malicious Cyber Defense eMagazine – January 2024 Edition 139 Copyright © 2024, Cyber Defense Magazine. All rights reserved worldwide.
Page 1 and 2:
3 New Risks That CISOs Will Face in
Page 3 and 4:
Top 6 Security Challenges of SMEs -
Page 5 and 6:
Reducing Burnout and Increasing SOC
Page 7 and 8:
@CYBERDEFENSEMAG CYBER DEFENSE eMAG
Page 9 and 10:
Cyber Defense eMagazine - January 2
Page 11 and 12:
Page 13 and 14:
Page 15 and 16:
Page 17 and 18:
Page 19 and 20:
Page 21 and 22:
1. AI development and use will dema
Page 23 and 24:
How Small and Mid-Sized Businesses
Page 25 and 26:
Achieving SOC 2 Type 2 attestation
Page 27 and 28:
lights can be turned on at the flip
Page 29 and 30:
About the Author Victor Atkins is a
Page 31 and 32:
The Distinct OT Cybersecurity Envir
Page 33 and 34:
About the Author Dave Purdy is the
Page 35 and 36:
Two critical enablers for autonomou
Page 37 and 38:
In conclusion, while the parallels
Page 39 and 40:
Advanced AI-Powered Attack Methods
Page 41 and 42:
Why Cybersecurity Maturity Model Ce
Page 43 and 44:
What CMMC Accomplishes It’s essen
Page 45 and 46:
AI: The Human Touch in Cybersecurit
Page 47 and 48:
with human intuition creates a powe
Page 49 and 50:
How does shifting from a reactive a
Page 51 and 52:
About the Author Paul Brucianni, Cy
Page 53 and 54:
AI and cybersecurity Cybercriminals
Page 55 and 56:
Conclusion In conclusion, combining
Page 57 and 58:
2. Selective Attention: Concentrati
Page 59 and 60:
NIS 2: From Obligation to Opportuni
Page 61 and 62:
Once the risks and challenges are i
Page 63 and 64:
Top 6 Security Challenges of SMEs B
Page 65 and 66:
Proactive Remediation is the Way Fo
Page 67 and 68:
Is 2024 the Year of Cloud Repatriat
Page 69 and 70:
Resource optimization: Workloads th
Page 71 and 72:
What to expect in the metaverse The
Page 73 and 74:
SolarWinds Lawsuit Reinforces the N
Page 75 and 76:
Inviting Others to the Table By inc
Page 77 and 78:
e used for an information protectio
Page 79 and 80:
work and not only the good guys can
Page 81 and 82:
terrorism. The criminal groups most
Page 83 and 84:
statement, and the other actions it
Page 85 and 86:
MGM & Caesars Cyberattacks: Lessons
Page 87 and 88: Companies must also adopt a zero-tr
Page 89 and 90: Another reason why threats keep gro
Page 91 and 92: Cyber Insurance: A Smart Investment
Page 93 and 94: data protection. However, the two a
Page 95 and 96: Cyber Resilience - Beyond Cyber Sec
Page 97 and 98: • Leveraging External Expertise:
Page 99 and 100: Cybersecurity Preparedness 2024 By
Page 101 and 102: approach and a focus on providing e
Page 103 and 104: enabled hacker groups to increase t
Page 105 and 106: Enhancing PCI DSS Compliance: The U
Page 107 and 108: Understanding how adversaries opera
Page 109 and 110: cryptocurrency favorably, and there
Page 111 and 112: About the Author James Hunt holds o
Page 113 and 114: streamlined architecture with fewer
Page 115 and 116: From the SIEM to the Lake: Bridging
Page 117 and 118: About the Author Omer Singer is the
Page 119 and 120: The Hardest Part: Marketing and Sal
Page 121 and 122: call upon. I find this fascinating
Page 123 and 124: Getting AI Right for Security: 5 Pr
Page 125 and 126: Against this backdrop, it’s criti
Page 127 and 128: opposition, and even complete inter
Page 129 and 130: As we have seen in Russia, VPNs off
Page 131 and 132: Understanding Hyperautomation Hyper
Page 133 and 134: Learning (ML), Robotic Process Auto
Page 135 and 136: Identity Providers Are Still the Bu
Page 137: About the Author Jason Martin and I
Page 141 and 142: New Year, New Consumer Demands in C
Page 143 and 144: 2. Transparent communication: Highl
Page 145 and 146: Key Trends in Cybersecurity Evolvin
Page 147 and 148: Better and Faster Sandboxes Traditi
Page 149 and 150: Over an 18-month period, Conti accu
Page 151 and 152: • During wartime, reduce the atta
Page 153 and 154: SOC roles aren’t for the faint of
Page 155 and 156: Safeguarding Children in the Era of
Page 157 and 158: strategy. Parents should seize the
Page 159 and 160: Securing Space Infrastructure for U
Page 161 and 162: For new satellite constellations, p
Page 163 and 164: Understand Cyber Insurance: Rising
Page 165 and 166: costs for such an incident. This is
Page 167 and 168: What You Need to Know About the Cyb
Page 169 and 170: deployment and time to value. Typic
Page 171 and 172: Why Companies Are Still Investing i
Page 173 and 174: technologies (PPT) could be an AI a
Page 175 and 176: • Abundance of sensitive informat
Page 177 and 178: 5. Upgrade to Newer, More Secure Sy
Page 179 and 180: they came under armed attack. Howev
Page 181 and 182: incursions have probably never been
Page 183 and 184: Keywords - Wireless peripheral devi
Page 185 and 186: nearby. The best way to prevent suc
Page 187 and 188: devices are found vulnerable, they
Page 189 and 190:
Page 191 and 192:
Page 193 and 194:
Page 195 and 196:
CyberDefense.TV now has 200 hotseat
Page 197 and 198:
Books by our Publisher: https://www
Page 199 and 200:
Page 201:
show all

The Cyber Defense eMagazine January Edition for 2024

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?