#41 Cyber Insurance, Social Engineering, and a promising AI Cyber Defender

1
00:00:09,100 --> 00:00:12,100
Hello and welcome to a new
episode of the CTO show with

2
00:00:12,100 --> 00:00:13,700
mammoths.
My name is Muhammad.

3
00:00:13,700 --> 00:00:16,500
I share daily insights about the
latest news and Trends in

4
00:00:16,500 --> 00:00:20,000
technology while exploring their
problem-solving abilities.

5
00:00:20,400 --> 00:00:23,600
I also talked about startups and
entrepreneurs behind the

6
00:00:23,600 --> 00:00:25,600
relative of products and
services.

7
00:00:26,600 --> 00:00:30,800
Let's get started.
In today's episode, I will be

8
00:00:30,800 --> 00:00:35,600
discussing couple of topics
ransomware, cyber Insurance,

9
00:00:35,900 --> 00:00:40,100
social engineering and a new AI
cybersecurity Defender.

10
00:00:40,600 --> 00:00:45,000
Let's get started. the first
article today comes from

11
00:00:45,000 --> 00:00:49,900
bleeping computer, where we
learn about a new ransomware

12
00:00:49,900 --> 00:00:55,500
called heartbeat, What makes
heartbeat unique is that it asks

13
00:00:55,500 --> 00:00:59,500
for the insurance details to set
the perfect price.

14
00:01:00,300 --> 00:01:06,200
So this allows that tackers to
understand the victims Financial

15
00:01:06,200 --> 00:01:10,700
capabilities and adjust the
ransom accordingly, the

16
00:01:10,700 --> 00:01:13,700
ransomware is still in
development phase, but it's

17
00:01:13,700 --> 00:01:18,300
something that individuals and
organizations should be aware of

18
00:01:18,300 --> 00:01:23,200
as it's in you of its kind by
asking for The insurance or

19
00:01:23,200 --> 00:01:28,100
cyber Insurance details,
speaking of awareness and cyber

20
00:01:28,100 --> 00:01:31,100
Insurance.
There's another article today

21
00:01:31,100 --> 00:01:36,700
that came from CS or online,
which discusses seven reasons to

22
00:01:36,700 --> 00:01:40,000
avoid investing in cyber
insurance which quite

23
00:01:40,000 --> 00:01:43,300
interesting.
With ransomware attacks like

24
00:01:43,300 --> 00:01:49,100
heart bit, which is, I just
mentioned, it's understandable

25
00:01:49,100 --> 00:01:53,300
that many companies are turning
to cyber insurance as Safeguard.

26
00:01:54,300 --> 00:01:59,600
However, as the magazine note,
cyber insurance has its own

27
00:01:59,600 --> 00:02:03,000
limitations.
Among the seven reasons,

28
00:02:03,000 --> 00:02:10,000
mentioned the article actually
put some underlines about the

29
00:02:10,000 --> 00:02:15,500
pitfalls of Cyber insurance has
mainly that sometime they don't

30
00:02:15,500 --> 00:02:18,600
cover all the cost.
They have a lot of terms and

31
00:02:18,600 --> 00:02:24,100
conditions and the most
important one that even if you

32
00:02:24,100 --> 00:02:31,000
pay using the insurance policy,
there is no guarantee that you

33
00:02:31,000 --> 00:02:33,000
will be able to recover your
data.

34
00:02:34,000 --> 00:02:39,400
What the article suggests
instead that it can be better to

35
00:02:40,300 --> 00:02:45,200
put this money.
Invest this money into new

36
00:02:45,200 --> 00:02:49,700
cybersecurity practices.
It's important to take a

37
00:02:49,700 --> 00:02:52,300
critical.
Look at the potential benefits

38
00:02:52,700 --> 00:02:56,900
and drawbacks of cyber Insurance
before you invest in it.

39
00:02:57,300 --> 00:03:00,900
I highly recommend that you read
the article because it has a lot

40
00:03:00,900 --> 00:03:03,100
of more details.
I will be sharing.

41
00:03:03,300 --> 00:03:07,800
The links as usual in the
episode description.

42
00:03:07,800 --> 00:03:12,300
Now, let's jump to another
security article and this is

43
00:03:12,300 --> 00:03:16,000
from security Affairs.
The article discussed the

44
00:03:16,000 --> 00:03:19,900
increasing sophistication of
social engineering attacks,

45
00:03:19,900 --> 00:03:23,900
social engineering attacks,
usually is the attempt of

46
00:03:23,900 --> 00:03:29,500
tricking people into getting
some sensitive information or

47
00:03:29,500 --> 00:03:33,700
taking or forcing them into
King.

48
00:03:33,700 --> 00:03:39,800
Harmful actions attackers are
using sophisticated techniques

49
00:03:40,100 --> 00:03:44,300
and the most obvious one is deep
fake videos and artificial

50
00:03:44,300 --> 00:03:50,000
intelligence to make sure that
these attacks are convincing to

51
00:03:50,000 --> 00:03:53,600
be vigilant.
And be sure about this.

52
00:03:53,600 --> 00:03:57,700
What the article suggest is to
use some few techniques that can

53
00:03:57,700 --> 00:04:01,700
help you in detecting these
kinds of attacks.

54
00:04:01,700 --> 00:04:05,400
It's not easy but there Are some
ways to doing the mitigation

55
00:04:05,800 --> 00:04:09,000
mainly using multi-factor
authentication, or two-factor

56
00:04:09,000 --> 00:04:13,200
authentication.
And the other one is utilizing

57
00:04:13,400 --> 00:04:17,399
the AI itself because there are
some AI tools that can detect

58
00:04:17,399 --> 00:04:23,600
deep, fakes, and the last one,
which I think it's underrated

59
00:04:24,300 --> 00:04:29,200
when you have prepared your
cyber security assessment.

60
00:04:29,400 --> 00:04:33,200
It's important to include that
from now on.

61
00:04:33,300 --> 00:04:38,500
On inside your risk assessment
process and planning.

62
00:04:38,500 --> 00:04:42,500
So you need to add the Deep fake
part for that and the phishing

63
00:04:42,500 --> 00:04:44,900
attack that might come from Deep
fakes.

64
00:04:46,000 --> 00:04:49,800
The last article today is again
security-related and it's from

65
00:04:49,800 --> 00:04:55,400
dark reading and it discusses,
what researchers have created,

66
00:04:56,000 --> 00:04:59,000
which is basically an AI
cybersecurity, defender model

67
00:04:59,200 --> 00:05:04,100
that can react to attackers the
system uses machine learning and

68
00:05:04,100 --> 00:05:07,400
analyze Network traffic to
identify potential threats.

69
00:05:08,100 --> 00:05:13,000
When the attack is detected, the
defender creates a diversion to

70
00:05:13,000 --> 00:05:18,500
trick the attacker away and Make
sure it can devastate him or

71
00:05:18,800 --> 00:05:23,000
divert him while the security
team in the is investigating and

72
00:05:23,000 --> 00:05:25,600
address the issue.
This is a very promising, it's

73
00:05:25,600 --> 00:05:28,600
still a research.
By the way, it's not out as in

74
00:05:28,600 --> 00:05:34,000
production, but it could be a
potential good idea to create a

75
00:05:34,000 --> 00:05:39,500
product based on it, to have
better ability to identify and

76
00:05:39,500 --> 00:05:43,400
response to attacks.
That's it for today.

77
00:05:43,800 --> 00:05:47,900
I hope that you enjoyed
listening to this episode as

78
00:05:47,900 --> 00:05:51,700
usual, if you have any feedback,
if you want to discuss any

79
00:05:51,700 --> 00:05:55,300
topic, I would be more than
happy to discuss that with you.

80
00:05:55,300 --> 00:06:00,100
You can reach out to me by email
or you can reach out to me by

81
00:06:00,100 --> 00:06:02,900
LinkedIn or Twitter.
Thank you very much for

82
00:06:02,900 --> 00:06:06,500
listening to this episode and
until we meet next time thank

83
00:06:06,500 --> 00:06:06,800
you.