Mastercard’s Post

Bredec Group Deciphering AI, cybersecurity governance and career transparency headline 10 trends to watch in CompTIA's IT ... - Yahoo Finance: Deciphering AI, cybersecurity governance and career transparency headline 10 trends to watch in CompTIA's IT ...  Yahoo Finance Inquiry@bredec.com

The Devious Dance of Deception: Social Engineering in the Digital Age Social engineering, the art of manipulating human psychology to gain access to information or systems, remains a top cyber threat. Unlike brute-force attacks, it exploits human vulnerabilities, making it a persistent challenge for organizations. This seemingly simple tactic unfolds in a meticulously crafted, multi-stage performance. The Four Acts of the Social Engineering Play Curtain Up: Information Gathering - The attacker meticulously researches the target, gleaning personal and professional details from social media (SOCMINT), open-source intelligence (OSINT), and potentially even the dark web (DARKINT). Building Trust: The Art of Deception - Armed with intel, the attacker transforms into a seemingly credible source, posing as a colleague, IT support, or even a concerned customer. Center Stage: The Moment of Exploitation - Leveraging emotional manipulation (fear, urgency, curiosity) or promises of gain, the attacker persuades the victim to divulge sensitive information or perform an action that compromises security. Denouement: The Payoff - The stolen information or compromised access allows the attacker to launch further attacks, steal data, or disrupt operations. Beyond the Stage: Unveiling Hidden Sources The traditional intelligence gathering methods of OSINT and SOCMINT are well-known. However, the digital landscape offers new, insidious sources: ADINT (Advertising Intelligence): Data collected by ad platforms, detailing user demographics and online behavior, can be weaponized for targeted attacks AI-INT (AI Intelligence): Emerging AI tools like generative pre-trained transformers can automate information gathering and personalize social engineering tactics for maximum impact. Curtain Call: Mitigating the Threat The key to preventing social engineering attacks lies in information security awareness and responsible online behavior: Employee Training: Regular phishing simulations and security awareness training empower employees to identify and resist social engineering tactics AI Usage Policies: Establish clear guidelines for employee interaction with AI tools, preventing the inadvertent leakage of sensitive data. Proactive Intelligence Gathering: Organizations can leverage OSINT, SOCMINT, and even ADINT tools to understand their online footprint and identify potential vulnerabilities for remediation. Remember: Social engineering preys on human trust. By fostering a culture of cybersecurity awareness and vigilance, organizations can significantly reduce their susceptibility to these deceptive attacks. #cybersecurity #Socanalyst #bedigitalsafe

In the ever-evolving world of #technology, what are the most in-demand skills today, and how can professionals ensure they stand out? Industry experts share their insights in this Silicon Republic article. Lorna Martyn, Regional Chair and SVP of Technology at #FidelityIreland, emphasises the importance of digital #skills across all sectors. She highlights advanced security skills and the protection of digital identity as crucial for the future. Additionally, she stresses the need for soft skills to effectively apply technical knowledge in the rapidly changing tech landscape. “In my opinion, learning agility, critical thinking, curiosity, emotional intelligence, creativity, and resilience are the most critical skills to sustain a career. With so much information and misinformation readily available, critical thinking skills have never been more important and will continue to be.” Read the full article now: https://lnkd.in/e6KtP2wh #FidelityAssociate #TechSkills #Innovation #Cybersecurity #TechCareers

AI is here, already helping thousands. But do managers actually know what they are using, and do business leaders see the disruption AI will bring? I see AI as having the potential to help us answer questions that have gone unanswered, to give us better answers than we've had before, to greatly aid productivity and to help creatives explore new ideas. It will help companies better understand both their new and existing customers and suppliers, and where both value and opportunities can be found. It is also going to change the cybersecurity space, helping us stay safer but also at the same time making it easier for malicious actors to do what they do. I've spent the last year exploring the AI industry, the products that are out there and how software development companies are using it in their own products. but I am now making my first steps into understanding it a lot more.

It's no secret that AI is reshaping how we think about IT infrastructure and cybersecurity. As the adoption of AI continues to surge, businesses are also facing significant hurdles that could hinder their journey towards a fully integrated AI system. Let's dive into what's holding us back. Cybersecurity threats loom large, evolving as fast—if not faster—than the technologies designed to counter them. These threats are not just issues of data protection but are existential threats to businesses in the digital age. Coupled with talent shortages, where the demand for skilled cybersecurity personnel far outstrips supply, organizations find themselves at a critical juncture. Additionally, regulatory delays—the lag in creating frameworks that keep pace with technological advancements—add another layer of complexity to AI adoption. What do these barriers tell us? Simply put, they underscore the need for a proactive approach towards developing robust cybersecurity measures, nurturing talent through education and training programs, and advocating for regulatory frameworks that both protect and propel innovation. In conclusion, overcoming these obstacles requires a collective effort from businesses, education institutions, and policymakers. It is only by recognizing and addressing these challenges head-on that we can fully unlock the potential of AI in IT infrastructure and cybersecurity. Let's work together to turn these barriers into stepping stones for success.

‘How to secure and audit (LLMs) are fundamental questions for every enterprise starting now.’ Get in touch with Risk Crew today to discuss how to deploy AI using a risk-based approach.

I received an inbound question via LinkedIn, asking me "How do you think Generative AI is transforming cybersecurity, and what challenges does it pose in terms of novel threats and market adoption?" Here is my short answer to that question, and ideally will have a longer form response up sometime soon. One of the major threats is mindless extrusion of corporate data. Your staff are pasting corporate secrets into Internet LLMs every day. There are 2 kinds of companies providing AI; those that tell you they are training their LLMs on your data, and those that tell you they are not, but are lying. Private AIs will be a big part of the market, but to consume safely you will need to secure the multitude of "SMALL large language models" that are servicing every employee and every team. It will take a few years, but there will be billions of sLLMs embedded in, and a part of, every thing we do. How to secure and audit them are fundamental questions for every enterprise starting now.

CYBERSECURITY TODAY AND THE RISE OF AI. IEEE Computer Society San Diego Chapter's 10th Invited Seminar Series 2024. 10 Deep 2024, 3:30-5:30 Pacific Time. Register: https://lnkd.in/grMueajP Registration required. WebEx link will be provided here a few days before event. Free for IEEE Members, Qualcomm employees and Dispatch Tech employees. Attendance is $15 for non-IEEE members and $5 for student non-members. *Hybrid event but in-person attendance encouraged - opportunity to meet and greet the experts from Dispatch Tech which is a company that specializes in network security, IT services, and compliance with a long list of standards. ABSTRACT: Cybersecurity Today is a rapidly evolving field that encompasses the technologies, practices, and processes designed to protect networks, devices, programs, and data from attack, damage, or unauthorized access. With the increasing reliance on digital systems across industries, cybersecurity has become a critical concern for organizations and individuals alike. We will be addressing some key trends and issues in cybersecurity today. The Rise of AI (Artificial Intelligence) is one of the most transformative trends in technology today, impacting a wide range of industries and aspects of daily life. AI refers to the development of computer systems that can perform tasks typically requiring human intelligence, such as visual perception, speech recognition, decision-making, and language translation. We will review how AI is shaping the present and future, its benefits and pitfalls. SPEAKER BIOGRAPHY: Raven Antiquiera is the Chief Information Security Officer at Dispatch Tech, Inc., a San Diego based cybersecurity company focused on CMMC implementation and consultation. He is a registered practitioner (RP) and certified CMMC professional (CCP). Raven employs his expertise in compliance, cybersecurity, and sociology to address small to medium business concerns within the defense industrial base (DIB). He seeks to explain complicated CMMC, DFARS, and FAR requirements and concepts in layman’s terms to help educate the DIB. Raven is a second generation Filipino-American who lives in San Diego, CA, and comes from a military family with a specialty in logistics and supply chain. He holds a BA in sociology, and frequently assists with local workforce and education development programs Address:San Diego