Intelligent CISO Issue 68 | Page 76

We ’ re seeing cybercriminals increasingly use AI to support malicious activities in new ways . there ’ s great value in taking a closer look at the TTPs attackers regularly use , which will help narrow the playing field and find potential ‘ choke points on the chess board .’
Generative AI in particular-to support their activities .
Narrowing the TTP playing field : Attackers will inevitably continue to expand the collection of tactics , techniques and procedures ( TTPs ) they use to compromise their targets . Yet defenders can gain an advantage by finding ways to disrupt those activities . While most of the day-to-day work done by cybersecurity defenders is related to blocking indicators of compromise ,

We ’ re seeing cybercriminals increasingly use AI to support malicious activities in new ways . there ’ s great value in taking a closer look at the TTPs attackers regularly use , which will help narrow the playing field and find potential ‘ choke points on the chess board .’

Making space for more 5G attacks : With access to an ever-increasing array of connected technologies , cybercriminals will inevitably find new opportunities for compromise . With more devices coming online every day , we anticipate that cybercriminals will take greater advantage of connected attacks in the future . A successful attack against 5G infrastructure could easily disrupt critical industries such as oil and gas , transportation , public safety , finance and healthcare .
Navigating a new era of cybercrime
Cybercrime impacts everyone and the ramifications of a breach are often far-reaching . However , threat actors don ’ t have to have the upper hand . Our security community can take many actions to better anticipate cybercriminals ’ next moves and disrupt their activities : collaborating across the public and private sectors to share threat intelligence , adopting standardised measures for incident reporting and more .
Organisations also have a vital role to play in disrupting cybercrime . This starts with creating a culture of cyberresilience – making cybersecurity everyone ’ s job – by implementing ongoing initiatives such as enterprisewide cybersecurity education programmes and more focused activities like tabletop exercises for executives .
Finding ways to shrink the cybersecurity skills gap , such as tapping into new talent pools to fill open roles , can help enterprises navigate the combination of overworked IT and security staff as well as the growing threat landscape . And threat sharing will only become more important in the future , as this will help enable the quick mobilisation of protections . u
76 www . intelligentciso . com