2024 Predictions “Tere won’t be a cyber war
between nations – while some international conflicts are increasing in intensity, ‘cyber-war’ is just not a thing. Cyber is yet another military branch and while it can be used as a destructive weapon, kinetic attacks such as bombing is simpler, faster, and for the purpose of destruction much more effective. “But, businesses will continue to
be targeted by nation state and semi- nation state actors, with SMBs, small municipalities, universities, and infrastructure suffering the most. Patching and updating, maintaining a zero-trust approach, and safeguarding from even simple attacks continues to challenge those organisations with limited budgets – and those are prime targets for attacks. “Te end-user is not stupid and it won’t be their fault – there is
Treat Lab researchers forecast that either a researcher or malicious hacker will find a technique to gather some of the sensor data from VR/MR headsets to recreate the environment users are playing in. “While quick response (QR) codes – which provide a convenient
way to follow a link with a device such as a mobile phone – have been around for decades, mainstream usage has exploded in recent years. Treat Lab analysts expect to see a major, headline-stealing hack in 2024 caused by an employee following a QR code to a malicious destination.” Sridhar Ramaswamy, SVP of AI, Snowflake adds: “Deep fakes are
also another hurdle, and we can expect increased attacks on what we humans collectively think of as our reality — resulting in a world where no one can, or should, trust a video of you because it may be AI-generated.” “Cybercriminals and bad actors will benefit from the widespread
deployment of advanced AI tools before their targets can set up AI in their own defence,” says Mario Duarte, VP of security, Snowflake. “A lot of businesses are cautious about adopting and using new technologies — there’s cost, regulatory requirements, reputational risk, and more at stake if it’s done poorly. However, bad actors won’t wait. For example, phishing is still a big deal, and most phishing emails are pretty clumsy and dumb. Generative AI will make this already effective attack vector even more successful. Tey’ll have the full firepower of large language models and generative AI, and defenders will be playing catch-up. Eventually the playing field will even out, but I expect a lot of pain in the meantime.” With all of the real threats out there combined with scaremongering
in the main stream, Etay Maor, senior director of security strategy at Cato Networks is quick to lay some of the myths to rest: “Tere won’t be a wave of AI based attacks – while AI has been getting a lot of attention ever since the introduction of ChatGPT, we are not even close to seeing a full-fledged AI based attack.
www.pcr-online.biz
a tendency to blame the user and couple it with ‘humans are the weakest link’ but humans are not going anywhere so let’s focus on more productive approaches. Cyber security responsibility is moving upwards, to the CISO, CIO, and board, not downward towards the employees and practitioners.” However, Stu Sjouwerman, CEO, KnowBe4 cautions: “Cyber-
attacks like phishing are getting more difficult to detect. It is imperative that employees keep the threat of phishing attacks top of mind and not become complacent. Tis is only made possible by recurrent security awareness training and simulated phishing so that end users have the knowledge to identify phishing attacks, report them and better protect their organisations. It comes down to building a strong security culture and we will see organisations continue to focus and build on this in 2024.” Neil Langridge, marketing and alliances director, e92plus adds:
“Te inbox remains the primary target for entry onto a network, as phishing emails contain to prove lucrative. Tat won’t change in 2024, but there will be a greater focus on education, awareness and the need for more integrated security around email security.” Maor continues: “It is on us to create security tools and
processes that will be easier to manage. We are going to see organisations move to products and services that while being more robust and advanced, offer simpler management with much less overhead of false positives, integration projects, and constant updates.” “Te challenge around cybersecurity predictions is not what
is going to change but whether it’s an evolution or a revolution,” says Langridge. “For example, Artificial Intelligence, Machine or Learning or any variation of the above has been a core element of the solutions helping protect against advanced threats for years, and continues to improve, but 2023 saw a huge awakening in the public understanding of what AI could be, and could do – and the democratisation of access to AI, making it a tool more easily leveraged by malicious hackers and cyber criminals.” “Te inexorable rise of artificial intelligence will continue to
evade and challenge security measures, but the market will become fragmented and specific to the different needs.
January/February 2024 | 23 Art Hu, Lenovo
Page 1 |
Page 2 |
Page 3 |
Page 4 |
Page 5 |
Page 6 |
Page 7 |
Page 8 |
Page 9 |
Page 10 |
Page 11 |
Page 12 |
Page 13 |
Page 14 |
Page 15 |
Page 16 |
Page 17 |
Page 18 |
Page 19 |
Page 20 |
Page 21 |
Page 22 |
Page 23 |
Page 24 |
Page 25 |
Page 26 |
Page 27 |
Page 28 |
Page 29 |
Page 30 |
Page 31 |
Page 32 |
Page 33 |
Page 34 |
Page 35 |
Page 36 |
Page 37 |
Page 38 |
Page 39 |
Page 40 |
Page 41 |
Page 42 |
Page 43 |
Page 44 |
Page 45 |
Page 46 |
Page 47 |
Page 48 |
Page 49 |
Page 50 |
Page 51 |
Page 52
