Content by Tom Field

AI: A Catalyst for Offense and Defense

Tom Field  •  August 28, 2024

Artificial intelligence is transforming cybersecurity on both offensive and defensive fronts. Attackers use AI to iterate and modify exploits rapidly, making malicious code harder to detect, said Tim Gallo, head - global solutions architects, Google.

AI: The Most, and the Least, Hyped Technology

Tom Field  •  August 22, 2024

Artificial intelligence, much like when the internet became public, is simultaneously the most overhyped and underhyped technology in history, said Sam Curry, vice president and CISO at Zscaler. Its application in cyber defense is still evolving.

The Cybersecurity Market: Balancing Risk and Reward

Tom Field  •  August 21, 2024

Economic uncertainties and technological advancements are transforming the cybersecurity landscape. The recent breaches and the use of automation and AI by adversaries have intensified the need for robust security measures, said Alberto Yépez, co-founder and managing director of Forgepoint Capital.

Foundational Cybersecurity Is Key to Securing AI Deployment

Tom Field  •  August 21, 2024

AI's integration into cybersecurity demands a strong foundational approach. Many companies seek advanced AI solutions but struggle with basic cybersecurity practices such as managing assets and patching vulnerabilities, said Michael Thiessmeier, executive director of U.S. NAIC-ISAO.

Ransomware Gangs Are in Decline But Still Make Lots of Noise

Tom Field  •  August 21, 2024

RedSense’s Yelisey Bohuslavskiy and Marley Smith believe ransomware is declining but caution that it still poses a significant threat. While attackers recycle old methods, they're taking desperate measures to target vulnerable groups such as cancer centers and to stoke fears in the marketplace.

Cybersecurity Is Everywhere: ENISA COO

Tom Field  •  August 20, 2024

Europe faces unprecedented security challenges as organizations embrace digital change. That's why ENISA is focusing on critical areas to bolster Europe's digital defenses - supporting member states by enhancing their cybersecurity programs through legislation, exercises and comprehensive reports.

CISOs on the Hook: SEC Tightens Cybersecurity Disclosures

Tom Field  •  August 20, 2024

The SolarWinds case has redefined cybersecurity disclosure obligations, especially for chief information security officers. The SEC's novel theories in this case have set a precedent for how organizations must present their cybersecurity practices, said Jennifer Lee, partner at Jenner & Block.

Building Timely and Truthful LLMs for Security Operations

Tom Field  •  August 19, 2024

Many cybersecurity organizations hope generative artificial intelligence and large language models will help them secure the enterprise and comply with the latest regulations. But to date, commercial LLMs have big problems - hallucinations and a lack of timely data, said NYU professor Brennan Lodge.

CyberEdBoard Profiles in Leadership: Karen Habercoss

Tom Field  •  August 15, 2024

As the chief privacy officer at UChicago Medicine, Karen Habercoss likes to tell her peers, "I know more about security than the average bear." And her knowledge has been put to the test in recent years, with the adjustment to remote work, telehealth and digital transformation.

Faster Recovery, Less Downtime With AI

Tom Field  •  August 14, 2024

Cyberattacks have become increasingly disruptive and often involve encryption or deletion of data that makes systems inaccessible. This creates substantial downtime and complicates the recovery process for organizations, said Jason Cook, AVP of worldwide partner sales engineering at Rubrik.

Securing AI in App Development: Balancing Speed With Safety

Tom Field  •  August 14, 2024

AI has revolutionized app development, while also introducing security challenges. Liqian Lim of Snyk discusses the importance of implementing security measures early in the development process to manage AI tool-related risks and safeguard the software development life cycle from vulnerabilities.

Third-Party Risk Management: A New Model for Healthcare

Tom Field  •  August 6, 2024

Healthcare organizations are shifting from outdated methods, endless spreadsheets and repetitive requests, in favor of modern, efficient approaches, said Shane Hasert, director of threat research and cyber security standards at ProcessUnity. Hasert described the current state of third-party risk management as...

Experts Warn of Post-Trump Shooting Misinformation, Scams

Tom Field , Cal Harrison , Prajeet Nair  •  July 14, 2024

As the investigation of the attempted assassination of former President Trump unfolds, authorities and cybersecurity experts advise individuals and organizations to beware of online threats in the forms of physical violence, nation-state disinformation and cybercrime campaigns.

Skills Gap: A Major Cyber Risk Not to Be Ignored

Tom Field  •  July 12, 2024

According to Fortinet's latest Global Skills Gap Report, 90% of organizations experiencing a breach in the past year can partially attribute the incident to a lack of cyber skills. Fortinet's Rob Rashotte offers insight on the report and tips for tackling the skills shortage and minimizing enterprise risk.

Cybersecurity Deserves the Proverbial Seat at the Table

Tom Field  •  June 14, 2024

Theresa Lanowitz, head of evangelism and research at AT&T Cybersecurity, discusses key insights from the latest cybersecurity report. Security leaders need balanced investing, more internal collaboration and better preparation for potential cyberthreats to improve enterprise security, she said.