IT Security Guru

Following Simone Biles' win at the Paris Olympics, her story around the pressures to perform and the need to develop protective mechanisms is a powerful narrative, mirroring the experiences of #cybersecurity professionals in their high-pressure environments. In this article, Haris Pylarinos, CEO of HackTheBox - Dr. AITH, offers practical strategies for mitigating #burnout, drawing parallels to the protective mechanisms athletes like Biles have employed to maintain their wellbeing. https://lnkd.in/eraxCqVY

The rise of #AI presents both opportunities and challenges in #cybersecurity. AI can easily exploit vulnerabilities, and deploying AI without robust security measures introduces significant risks. As the technology landscape rapidly changes, many organisations are prioritising AI innovation over security. This leaves AI models vulnerable to threats, emphasising the importance of established security frameworks and educating teams on prominent and ever-changing AI risks. In this piece, Aaron Rosenmund from Pluralsight outlines six new threats and what security teams should do to defend their organisation. https://lnkd.in/ebyyWEaC

Despite the rise in #cyberinsurance adoption, jumping from 51% in 2022 to 66% in 2024, the number of claims has fallen by over a third - from 58% to just 36% in 2024. This is according to the 2024 Data Health Check, published by business and technology resilience specialist Databarracks, which surveyed 500 UK IT decision-makers. James Watts, Managing Director at Databarracks, commented, “We have long speculated about the negative effect of cyber insurance policies on ransomware. Organisations were incentivised to pay ransoms instead of refusing, leading to a vicious cycle of payments. The nascent cyber insurance market suddenly became unsustainable." https://lnkd.in/eFkeMd3e

According to research from Absolute Security, over half (54%) of CISOs feel their security team is unprepared for evolving AI-powered threats. Nearly half (46%) of CISOs view #AI as a greater threat to their organisation’s #cyberresilience than an asset, indicating that AI might pose more risks in protecting against #cyber threats rather than enhancing cyber resilience. Furthermore, 39% of CISOs have personally ceased using AI due to concerns about cyber breaches, and 44% have prohibited their employees from using AI for the same reason. Andy Ward, SVP & GM at Absolute Security, said, “Our research has highlighted the significant danger posed by evolving AI threats, and we urge organisations to strengthen their cyber resilience structures to cope. As AI-driven cyber threats continue to advance in complexity, proactive measures are essential to safeguard sensitive data assets and mitigate the associated risks." https://lnkd.in/err_vYPh

The consequences of a successful #cyberattack can be disastrous. From substantial financial loss to significant reputational damage, they can lead to untold operational disruption. Yet, despite the clear and present danger, some businesses continue to deprioritise cybersecurity. With a third of security leaders stating that they only prioritise #cybersecurity after an attack occurs and a concerning 15% of businesses failing to invest in cybersecurity measures, it is clear that cybersecurity is still being deprioritised. Whether this is a calculated decision or a matter of managing risk, it leaves the businesses’ data and processes exposed to attack.    Large corporations like Microsoft and AT&T, both of which recently experienced #cyber breaches, are particularly vulnerable. These very public incidents can feed the perception that small and medium-sized businesses are unlikely to be targeted by #cybercriminals. However, this does not ring true when compared to a recent government survey that showed that 45% of medium-sized businesses and 50% of all companies in the UK have suffered some sort of breach or cyber attack in the past 12 months. In this article, Tom Exelby, Head of Cyber Security at Red Helix, discusses the importance of taking a proactive approach to cyber security to ensure risk mitigation, safeguarding, and the overall success of a business.    https://lnkd.in/eS7xktYd

Employers are struggling to find enough qualified individuals to fill the demand created by #cybercrime, given its huge list of disparate skills. In this article, Richard Beck, director of #cybersecurity at QA Ltd, discusses the latest trends in specialist skills for #cyber professionals and those emerging skills that leaders and individuals need to focus on most to future-proof their careers and their businesses. https://lnkd.in/eJb_SvGz

Artificial intelligence is undeniably transforming the landscape of #cybercrime. In 2023, global #ransomware payments soared to an astonishing $1.1 billion, driven by the increasing sophistication, spread, and accessibility of #AI in these scenarios. Advanced spoofing techniques now exploit legitimate brand email addresses to evade detection, while AI can imitate the language of trusted contacts when impersonating them—these examples are just the beginning. Nearly 45% of business leaders are worried about AI's role in intensifying cyber threats, and the UK's National Cyber Security Centre has warned that AI is democratising cybercrime, allowing even inexperienced criminals to carry out complex attacks that were once the domain of seasoned adversaries.   In this article, Irvin Shillingford from Hornetsecurity explains the top three reasons AI-powered attacks are on the rise, the common business vulnerabilities that are leveraged, and how companies can combat these effectively. https://lnkd.in/eTtnd4Bx

Women in CyberSecurity (WiCyS) Announces 5th Annual Security Training #Scholarship, in partnership with the SANS Institute WiCyS Executive Director, Lynn Dohm, stated, “It is a security risk not to have the diverse perspective that women and underrepresented individuals can bring to the cybersecurity workforce. This program offers individuals the chance to enter lucrative, life-changing careers while helping to mitigate current and future security risks.” Read more: https://lnkd.in/eqSYPupt #WomeninCyber #Cybersecurity #Cyber

The Inaugural Study of #EPSS Data and Performance report has been released, outlining vulnerability exploitation in the wild since 2017. ACDS, who are silver sponsors of the report, believe that this is a crucial next step for standardised #vulnerability reporting. Elliott W., CTO of ACDS, says: "EPSS is the logical next step in quantifying the risk of a vulnerability with impact." Read more here: https://lnkd.in/e_VwryeC

💥 Security Serious Unsung Heroes Awards 2024 open for nominations 💥 Nominations for the ninth annual Security Serious Unsung Heroes Awards have opened. The awards are all about celebrating the UK’s #cybersecurity professionals, teachers, lecturers, leaders, and those working to make the industry not only more secure, but also more diverse and healthier for employees. Sponsors include KnowBe4, Hornetsecurity, Think Cyber Security Ltd, Pulse Conferences and The Zensory. The awards are also supported by ComputerWeekly.com, Security on Screen and the IT Security Guru. Nominations close on the 6th September 2024. https://lnkd.in/ePrAVbui