#41 Cyber Insurance, Social Engineering, and a promising AI Cyber Defender

0:09 Hello and welcome to a new episode of the CTO show with mammoths. My name is Muhammad. I share daily insights about the latest news and Trends in technology while exploring their problem-solving abilities. I also talked about startups and entrepreneurs behind the relative of products and services. Let's get started. In today's episode, I will be discussing couple of topics ransomware, cyber Insurance, social engineering and a new AI cybersecurity Defender. Let's get started. the first article today comes from bleeping computer, where we learn about a new ransomware called heartbeat, What makes heartbeat unique is that it asks for the insurance details to set the perfect price.

1:00 So this allows that tackers to understand the victims Financial capabilities and adjust the ransom accordingly, the ransomware is still in development phase, but it's something that individuals and organizations should be aware of as it's in you of its kind by asking for The insurance or cyber Insurance details, speaking of awareness and cyber Insurance. There's another article today that came from CS or online, which discusses seven reasons to avoid investing in cyber insurance which quite interesting. With ransomware attacks like heart bit, which is, I just mentioned, it's understandable that many companies are turning to cyber insurance as Safeguard.

1:54 However, as the magazine note, cyber insurance has its own limitations. Among the seven reasons, mentioned the article actually put some underlines about the pitfalls of Cyber insurance has mainly that sometime they don't cover all the cost. They have a lot of terms and conditions and the most important one that even if you pay using the insurance policy, there is no guarantee that you will be able to recover your data. What the article suggests instead that it can be better to put this money. Invest this money into new cybersecurity practices. It's important to take a critical. Look at the potential benefits and drawbacks of cyber Insurance before you invest in it.

2:57 I highly recommend that you read the article because it has a lot of more details. I will be sharing. The links as usual in the episode description. Now, let's jump to another security article and this is from security Affairs. The article discussed the increasing sophistication of social engineering attacks, social engineering attacks, usually is the attempt of tricking people into getting some sensitive information or taking or forcing them into King. Harmful actions attackers are using sophisticated techniques and the most obvious one is deep fake videos and artificial intelligence to make sure that these attacks are convincing to be vigilant. And be sure about this.

3:53 What the article suggest is to use some few techniques that can help you in detecting these kinds of attacks. It's not easy but there Are some ways to doing the mitigation mainly using multi-factor authentication, or two-factor authentication. And the other one is utilizing the AI itself because there are some AI tools that can detect deep, fakes, and the last one, which I think it's underrated when you have prepared your cyber security assessment. It's important to include that from now on. On inside your risk assessment process and planning.

4:38 So you need to add the Deep fake part for that and the phishing attack that might come from Deep fakes. The last article today is again security-related and it's from dark reading and it discusses, what researchers have created, which is basically an AI cybersecurity, defender model that can react to attackers the system uses machine learning and analyze Network traffic to identify potential threats. When the attack is detected, the defender creates a diversion to trick the attacker away and Make sure it can devastate him or divert him while the security team in the is investigating and address the issue. This is a very promising, it's still a research. By the way, it's not out as in production, but it could be a potential good idea to create a product based on it, to have better ability to identify and response to attacks. That's it for today.

5:43 I hope that you enjoyed listening to this episode as usual, if you have any feedback, if you want to discuss any topic, I would be more than happy to discuss that with you. You can reach out to me by email or you can reach out to me by LinkedIn or Twitter. Thank you very much for listening to this episode and until we meet next time thank you.