Intelligent CISO Issue 80 | Page 7

Hacker-powered security report : Firms turn to human intelligence amid rising AI threats
Guidance from National Cyber Security Centre to help brands counter malvertising with advertising partners

CISO news

Hacker-powered security report : Firms turn to human intelligence amid rising AI threats

ackerOne , a leader in human-powered security , has published its eighth-annual 2024 Hacker-Powered Security

H

Report , which proves that in the last 12 months , the security researcher community has further matured its skill sets to meet customer demand .
Nearly 10 % of security researchers now specialise in AI technology , as 48 % of security leaders consider AI to be one of the greatest risks to their organisations .
HackerOne ’ s Hacker-Powered Security Report combines perspectives from the researcher community , customers and security leaders with insights from the world ’ s largest database of vulnerabilities . The report explores how security-focused organisations integrate human expertise with technology and AI for a defence-in-depth strategy .
“ Even the most sophisticated automation can ’ t match the ingenuity of human intelligence ,” said Chris Evans , HackerOne CISO and Chief Hacking Officer . “ The 2024 Hacker-Powered Security Report proves how essential human expertise is in addressing the unique challenges posed by AI and other emerging technologies . The report also provides guidance on building productive relationships between organisations and security researchers so the most novel and elusive vulnerabilities can be effectively found and fixed .”
The Hacker-Powered Security Report is based on data from HackerOne ’ s vulnerability database and includes insights from HackerOne customers , a panel of 500 global security leaders , and more than 2,000 hackers on the platform . It was compiled between June 2023 and August 2024 .

Guidance from National Cyber Security Centre to help brands counter malvertising with advertising partners

n an effort to combat the growing threat

I of malvertising and reduce the risk of cyberfacilitated fraud , government guidance from the National Cyber Security Centre has been released for brands and their advertising partners .

This initiative aims to make it harder for cybercriminals to deliver malicious advertising and enhance security standards across the digital advertising industry .
To protect against the rising threat of malvertising , digital advertising partners are advised to adopt several critical security measures . actors to infiltrate their advertising ecosystems .
Additionally , partners have been advised to introduce robust cybersecurity practises by securing infrastructure such as servers , code and data transfers , with a focus on transparency and thorough vetting of thirdparty services .
Partners must adhere to reputable data usage practices by complying with GDPR and using verified data channels to safeguard sensitive information . Industry standards like ads . txt and buyers . json should be implemented to improve transparency and combat malvertising , with independent certifications signalling best-practice compliance .
Firstly , digital advertising partners are encouraged to implement robust ‘ Know Your Customer ’ measures to verify customer identities and monitor customer activities , making it difficult for malicious
Effective malvertising detection and removal measures are crucial for maintaining safe user experiences and protecting campaigns from malicious content .
WWW . INTELLIGENTCISO . COM 7