Content by Anna Delaney

How AI Can Empower Defenders, Enhance Cybersecurity

Anna Delaney  •  July 14, 2023

Generative AI is growing rapidly as organizations seek ways to transform human tasks. With the ability to process and analyze large volumes of data in real time, AI can empower defenders to detect and respond to threats more effectively, said John Giamatteo, cybersecurity president at BlackBerry.

Can Generative AI Help Secure the Supply Chain?

Anna Delaney  •  July 13, 2023

Supply chain attacks, such as the MOVEit data breach that has affected more than 150 organizations, are "the nature of the landscape now," said security leader Ian Hill of Upp Corp. The answer to this scourge may be using generative AI to qualify partners and to analyze and score supply chain risk.

How AI Can Help Mitigate BEC Scams

Anna Delaney  •  July 13, 2023

Apart from some of the threats surrounding AI, this emerging technology can help defenders formulate effective policies and controls to prevent and mitigate BEC scams. With the evolving threat landscape, harnessing AI becomes crucial in defending, said Johan Dreyer, CTO at Mimecast.

ISMG Editors: Virtual War Between US and China Persists

Anna Delaney  •  July 7, 2023

In the latest weekly update, four editors at ISMG discuss highlights from recent ISMG events, the winners and losers in Forrester's first-ever network analysis and visibility rankings, and the ongoing tech trade war between the U.S. and China and its impact on the global supply chain.

Security Tool Consolidation: How to Plan, What to Avoid

Anna Delaney  •  July 6, 2023

A growing number of security teams are looking to consolidate tools to simplify operations, said Gartner analyst Dionisio Zumerle. "When you have the complexity, it's very hard to identify misconfigurations between the different overlapping tools, and it's also hard to identify security gaps."

Creative Ways to Educate Employees on Generative AI Use

Anna Delaney  •  July 6, 2023

Organizations need to adopt a creative approach when building policies around the legal, commercial and reputational risks raised by generative AI tools - such as with privacy, consumer protection and contractual obligations, said legal expert Anna King of Markel.

What Should a Chatbot Policy Look Like?

Anna Delaney  •  July 5, 2023

CISO Ian Thornton-Trump said he is opportunistic about using chatbots but warns that the technology needs oversight and testing to ensure "the responses that it's giving are accurate and the information it's able to access is also pertinent to the questions that are commonly asked."

Steps to Improve External Attack Surface Management

Anna Delaney  •  July 3, 2023

"Exposure management has become top of mind for most CISOs" due to three factors: the uncertain geopolitical landscape, the proliferation of the cloud and an increased focus on regulations and compliance, according to Sarah Ashburn, Chief Revenue Officer at Censys.

How to Snare Software Supply Chain Hackers With Honeytokens

Anna Delaney  •  July 3, 2023

Attackers targeting the supply chain are "quite predictable in their movements; they want to persist their access, so they're looking for credentials," said Mackenzie Jackson, developer advocate at GitGuardian, who recommends deploying honeytokens to track the predictability of criminals' actions.

ISMG Editors: Fallout for CISOs in SEC-SolarWinds Probe

Anna Delaney  •  June 30, 2023

In the latest weekly update, ISMG editors discuss the potential fallout from an SEC investigation of SolarWinds and its CFO and CISO, why the number of individuals affected by Clop's campaign against MOVEit is on the rise, and highlights from InfoSecurity Europe.

Forrester Report: 3 Top New Threats in 2023

Anna Delaney  •  June 16, 2023

The potential for cybercriminals to reverse-engineer generative AI tools, the rise of geopolitical threats and increased cloud complexity are among the top new threats facing security teams in 2023, according to Forrester's Top Cybersecurity Threats In 2023 report.

ISMG Editors: The Changing Nature of the Security Profession

Anna Delaney  •  June 16, 2023

In the latest weekly update, ISMG editors discuss how cyber risk is becoming more closely tied to the economic health of nations, why a rural U.S. healthcare provider is closing due in part to ransomware attack woes, and why some cybersecurity companies have laid off staff this month.

Why OT and IT Teams Must Collaborate for NIS2 Compliance

Anna Delaney  •  June 9, 2023

The new version of the Network and Information Systems Directive, or NIS2, created by EU member states in January 2023, enhances security requirements, simplifies reporting obligations and introduces stricter supervisory measures, says Karl Lankford of BeyondTrust.

ISMG Editors: Verizon's DBIR Reveals Surge in BEC Scams

Anna Delaney  •  June 9, 2023

In the latest weekly update, four ISMG editors discuss highlights from Verizon's 16th annual Data Breach Investigations Report, what's on the mind of CISOs in Malaysia and the Philippines, and how the U.S. SEC sued crypto trading platforms Binance and Coinbase over securities violations.

Shedding New Light on Software Visibility in the Age of SBOM

Anna Delaney  •  June 7, 2023

With the federal government's software bill of materials regulations looming, many organizations are not ready to respond, warned CISO Sean Atkinson of the Center for Internet Security. He provided tips for ensuring transparency in the software supply chain and preparing for SBOM regulations.