Content by Anna Delaney

Proof of Concept: Securing Elections in the Age of AI

Anna Delaney  •  February 27, 2024

In the latest "Proof of Concept," Jeff Brown, CISO for the state of Connecticut, and Lester Godsey, CISO for Maricopa County, Arizona, join ISMG editors to discuss AI-related threats to election security, safeguarding against cyber and physical threats and coordinating efforts for complete security.

The Path to Managing AI Ethically - and Achieving ISO 42001

Anna Delaney  •  February 26, 2024

In late 2023, the debut of ISO/IEC 42001 marked a major advance in AI standards, offering a systematic framework for AI management. Avani Desai of Schellman sees it as a "paradigm shift" that emphasizes managing AI-specific risks that are distinctly different from traditional concerns.

ISMG Editors: The 'New Frontier' of AI and Identity Security

Anna Delaney  •  February 23, 2024

In the latest weekly update, Jeremy Grant of Venable LLP joins editors at ISMG to discuss the state of secure identity in 2024, the challenges in developing next-generation remote ID proofing systems, and the potential role generative AI can play in both compromising and protecting identities.

Open-Source Oversight: Security Gaps in IoT and OT Devices

Anna Delaney  •  February 22, 2024

Previous studies on IoT and OT devices have primarily focused on internal components, neglecting open-source components that are crucial for internet and network connectivity, according to Stanislav Dashevskyi and Francesco La Spina, security researchers at Forescout Technologies.

ISMG Editors: What Happened to the Cyberwar in Israel?

Anna Delaney  •  February 16, 2024

In the latest weekly update, four ISMG editors discussed the relatively low profile of cyberwarfare in recent international conflicts, the potential revival of a dormant HIPAA compliance audit program and the security implications of sovereign AI development.

ISMG Editors: What CISOs Should Prepare for in 2024

Anna Delaney  •  February 9, 2024

In the latest weekly update, Joe Sullivan, CEO of Ukraine Friends, joins three editors at ISMG to discuss the challenges of being a CISO in 2024, growing threats from disinformation, vulnerabilities in MFA, AI's role in cybersecurity, and the obstacles to public-private information sharing.

Getting More Out of Investments in Network-Centric Solutions

Anna Delaney  •  February 8, 2024

Venture capital investor Pramod Gosavi discussed the drawbacks of relying on network-centric cybersecurity solutions that are driving up costs. He recommended proactive strategies, such as zero trust, that emphasize minimal access and continuous verification and investments in AI-based technologies.

ISMG Editors: Why Are Microsoft's Systems So Vulnerable?

Anna Delaney  •  February 2, 2024

In the latest weekly update, ISMG editors discussed the potential role of AI in cloud security, how the recent cyberattack on Microsoft by Russian state hackers highlighted the vulnerabilities associated with legacy systems, and how to secure APIs in the age of zero trust.

Cyber Fail: When Ransomware Gangs Get Careless

Anna Delaney  •  February 2, 2024

Welcome to "Cyber Fail," where our experts uncover fails so we can all strengthen our defenses. Today, we examine what happens when ransomware groups get careless, application developers' laissez-faire attitude toward vulnerabilities, and the security woes of a beleaguered crypto exchange.

Proof of Concept: How Do We Ensure Ethical AI Systems?

Anna Delaney  •  January 31, 2024

In the latest "Proof of Concept," Sam Curry of Zscaler and Heather West of Venable assess how vulnerable AI models are to potential attacks, offer practical measures to bolster the resilience of AI models and discuss how to address bias in training data and model predictions.

ISMG Editors: Emerging AI Tech for Cloud Security in 2024

Anna Delaney  •  January 26, 2024

In the latest weekly update, Troy Leach, CSO at Cloud Security Alliance, joins three editors at ISMG to discuss important cybersecurity issues, including how generative AI is enhancing multi-cloud security, AI's influence on authentication processes, and the state of zero trust and IoT security.

ITRC Report: Breaches Up 78% in 2023, Breaking 2021 Record

Anna Delaney  •  January 25, 2024

Supply chain attacks and zero-day exploits surged in 2023, helping to set yet another record for data breaches tracked by the Identity Theft Resource Center. James E. Lee, COO of the group, explained why the number of compromises grew so dramatically - from 1,801 incidents in 2022 to 3,205 in 2023.

ISMG Editors: Why Are Crypto Phishing Attacks Surging?

Anna Delaney  •  January 19, 2024

In the latest weekly update, ISMG editors discussed why crypto-seeking drainer scam-as-a-service operations are thriving, a novel legal move that recovered a hospital's stolen data, and a ground-breaking case involving bitcoin that could streamline recovery for victims.

AI Governance: Legal Risks and Compliance Challenges

Anna Delaney  •  January 19, 2024

Generative AI, once a buzzword, is now the subject of a focused approach, according to attorney Edward Machin of Ropes & Gray LLP. Organizations are prioritizing specific issues around gen AI and establishing governance frameworks from the outset, Machin said.

ISMG Editors: Will We Ever Get a Handle on API Security?

Anna Delaney  •  January 12, 2024

In the latest weekly update, ISMG editors discussed how the surge in API usage poses challenges for organizations, why good governance is so crucial to solving API issues and how The New York Times' legal action against OpenAI and Microsoft highlights copyright concerns.