|
Good day. Day two of the RSAC Conference focused on the threat environment, both the Middle East conflict and the growing view that the world is entering a dangerous, volatile period of geopolitical and technological risk not seen in years.
Much of that translates to cyber. There is a palpable sense of urgency that companies aren't coming to grips with the threat posed by AI. Or at least, not fast enough to counteract what many people I spoke with predict will be a very difficult few years for corporate security as the AI advantage accrues to the attackers.
Hackers don't have corporate approval processes, compliance concerns, internal politics, or multimillion-dollar budgets. They can deploy AI capabilities faster, scanning for vulnerabilities and weaknesses at scale and speed. That troubles cyber experts.
" It's gonna get a little spicy," said Bob Ackerman, co-founder and managing partner at venture capital firm Datatribe.
But there are deeper concerns about evolving tactics. The Stryker cyberattack, for example, didn't involve much malware. The attackers used tools already installed and trusted on Stryker's network, save for a malicious file deployed to let them hide their tracks. The implication is that groups that once employed relatively amateurish tactics are quickly learning from others.
"That Iranian group used to deploy wiper malware, but this time, they didn't. They didn't need to. This is the kind of stuff the Russians have been pioneering," said Dick O'Brien, principal threat intelligence analyst at Broadcom.
More news below.
|
