GRCIE

How is AI reshaping the cybersecurity landscape? How can organizations better support overburdened teams? GRCIE’s CEO, Jenai Marinkovic, joined ISACA’s Jon Brandt, CISM, CDPSE, CCISO, CISSP, PMP and Jo Stewart-Rattray of the Australian Computer Society on My Security TV to unpack the 2024 State of Security report. They examined workforce stress, AI-driven solutions, and governance challenges in a rapidly evolving field. Don’t miss this insightful conversation with global and regional leaders in cybersecurity and risk management. #CybersecurityInsights #AI #Governance #StateofSecurity

If you’re tired of chaotic boarding processes at airports, American Airlines might have a solution. Their new tech system enforces boarding order by playing a beep when passengers try to board outside their assigned group. The system has already rolled out to over 100 airports and will expand to hubs soon. Why now? As holiday travel kicks into high gear, the airline expects over 8.3 million passengers to board between Nov. 21 and Dec. 3. By keeping line cutters in check, this innovation promises faster boarding and fewer delays. But it’s not just about efficiency. Airlines are also using these systems to safeguard loyalty perks for frequent flyers. Early boarding is a highly valued benefit for elite passengers, and this system ensures it remains exclusive. American isn’t the only airline innovating. United Airlines has implemented countdown timers and digital updates for travelers. As airlines embrace technology, we’re seeing the start of a smarter, more organized boarding process—good news for anyone navigating crowded airports this season. What do you think of these changes? Progress or overkill? #AirlineTech #TravelUpdates #BoardingSolutions

Artificial intelligence (AI) is no longer the exclusive domain of tech giants or multinational corporations. A new report from TouchBistro reveals that 95% of independent restaurants—businesses often seen as slow adopters of technology—are now utilizing AI. The most popular AI applications for restaurants include: ?? Inventory & Menu Optimization (35%): Smarter tools are helping manage stock and craft customer-focused menus. ?? Reservations & Marketing (30-32%): Automating guest interactions and creating personalized marketing campaigns. ?? Voice Ordering & Phone Answering (29-30%): Reducing staff burdens while improving customer communication. The pandemic accelerated this shift as small businesses sought to do more with less. AI now offers tools to enhance efficiency and navigate rising costs—critical in industries like food service, where margins are tight. Operators like Christopher Pittsley are already seeing the benefits. Using a chatbot to create social media posts, Pittsley highlights the time savings AI delivers. However, he also notes the importance of fine-tuning the technology to meet specific needs. The takeaway? AI is becoming more accessible to businesses of all sizes. Whether you’re in food service, retail, or professional services, the question isn’t whether AI is relevant—but how it can help your business thrive. #ArtificialIntelligence #TechInBusiness #SmallBusiness #AIAdoption #RestaurantTech #BusinessEfficiency

Microsoft’s AI Agents: Hype or Game-Changer? At Ignite 2024, Microsoft CEO Satya Nadella introduced AI agents—a bold step toward tools that don’t just respond to commands but can autonomously complete tasks on behalf of users. From approving returns to identifying supply-chain errors, these tools promise significant operational benefits. Here’s a quick breakdown: ? What’s new? AI agents aim to handle workflows and long-term tasks, unlike current tools limited to generating text or simple responses. Microsoft envisions every organization having a “constellation” of these agents, tailored to their needs. ? Why is this important? These tools could save time by automating routine processes, enabling teams to focus on higher-value work. For example, in logistics, AI agents could spot costly errors before they snowball into larger problems. ? The debate: While Microsoft pushes forward, competitors like Salesforce are skeptical. CEO Marc Benioff called Microsoft’s pivot “panic mode” and questioned the effectiveness of its Copilot assistant. Meanwhile, the high costs of AI development and concerns about privacy remain pressing challenges. For businesses exploring tools like Microsoft Copilot, start with pilot programs focused on low-risk tasks. Always ensure tools are configured to protect sensitive data, and establish clear oversight processes to address errors or inaccuracies promptly. #MicrosoftIgnite #AIInnovation #EmergingTech #ArtificialIntelligence #Cybersecurity

ChatGPT Diagnoses Better Than Doctors? A Small Study Sparks Big Ideas In a small study, ChatGPT-4 outperformed human doctors in diagnosing complex medical cases. The chatbot achieved an impressive 90% accuracy, compared to the doctors’ average of 74% and 76% (with or without the bot). While the study’s sample size was limited—50 doctors tested on six challenging cases—it highlights fascinating insights into human-A.I. interaction: ?? Bias vs. Data: Doctors often ignored ChatGPT’s better suggestions, sticking to their initial diagnoses—a striking example of cognitive bias in action. ?? Underestimating A.I.: Many participants treated ChatGPT like a search engine, failing to utilize its ability to analyze entire case histories and provide nuanced reasoning. This experiment is a glimpse into the future of A.I.’s role across industries: ? Enhancing Human Judgment: A.I. isn’t just about automation; it’s a tool for offering second opinions, uncovering patterns, and improving decision-making. ? A.I. Literacy Matters: To fully harness A.I.’s capabilities, professionals need to learn how to use these tools effectively and confidently. Even with its limitations, this study shows the transformative potential of A.I. systems. From healthcare to cybersecurity to education, tools like ChatGPT can complement human expertise and solve problems in ways we’ve only begun to explore. #ArtificialIntelligence #SmallStudyBigImplications #ChatGPT #AIAndHumanity #TechInnovation #FutureOfAI

Black Friday or Black Fraud Day? Black Friday has evolved into the pinnacle of holiday shopping, but it’s also become prime time for cybercriminals. With over ￡11.5m lost to scams last holiday season in the UK alone, the stakes have never been higher for shoppers. Fraudsters are leveraging advanced technologies like artificial intelligence to create convincing scams that target bargain hunters. Here’s what you need to know: 1?? How Scammers Operate: ? Fraudsters use AI to mimic legitimate businesses, creating fake listings for high-end tech or clothing. ? Social media platforms and online marketplaces are hotspots—over 43% of fraud reports mention them. 2?? Who’s Being Targeted? ? Consumers aged 30–49 are most vulnerable, accounting for 43% of reported cases. ? Average losses are significant: ￡695 per victim during the holiday shopping period. 3?? Stay Safe With These Tips: ? Set Up Two-Step Verification: Add an extra layer of protection to your accounts. ? Avoid Bank Transfers: Use credit cards for purchases to benefit from better fraud protection. ? Research Sellers: Look for reviews on trusted platforms before making a purchase. ? Be Wary of Urgency: Scammers often pressure victims to “act fast.” Take your time to verify. Black Friday should be about scoring great deals—not falling victim to scams. Equip yourself with the right knowledge to enjoy a secure shopping experience. ?? Learn more about the latest cybersecurity trends and tips to protect yourself this holiday season. #Cybersecurity #BlackFridayScams #OnlineSafety #CloudSecurity #GRC #Educatio

The 2023 Top Routinely Exploited Vulnerabilities report from Cybersecurity and Infrastructure Security Agency and National Security Agency and international partners is out, and the findings are eye-opening: ? Zero-day vulnerabilities are on the rise. Of the top 15 vulnerabilities in 2023, 11 were zero-day exploits. ? Attackers are capitalizing on publicly known weaknesses that remain unpatched or improperly mitigated. Steps to Strengthen Your Cybersecurity Posture ?? For vendors, designers, and developers: ? Prioritize secure-by-default configurations—eliminate default passwords and enhance system defenses without additional configurations. ? Ensure CVEs include detailed Common Weakness Enumerations (CWEs) to identify the root cause and improve future defenses. ??? For end-user organizations: ? Apply timely patches and use centralized patch management systems. ? Deploy robust security tools like web application firewalls and network protocol analyzers to monitor traffic and detect suspicious activity. ? Collaborate with software providers to ensure they adhere to secure-by-design principles. Staying ahead of cyber threats requires proactive measures and awareness of evolving attacker strategies. Let’s work together to make our networks resilient. #CybersecurityEducation #VulnerabilityManagement #CloudSecurity #SecureByDefault

As AI evolves, the industry is recognizing that “bigger” isn’t always “better.” For years, AI models were built by feeding in more data and using more computing power, leading to advances like GPT-4. But researchers are now finding limits to this “scaling up” approach, and new strategies are emerging that could change how we think about AI. One key approach is called “test-time compute.” This technique enables AI to think more like humans during the inference phase—when models generate answers to prompts or solve problems. By generating and evaluating multiple possibilities in real-time, AI models can arrive at the most accurate solutions without requiring massive pre-training. OpenAI’s new “o1” model, for example, embraces this multi-step reasoning, creating a more dynamic decision-making process that enhances performance without requiring massive hardware resources. This shift has the potential to lower costs, reduce power consumption, and alleviate the AI industry’s demand for specific hardware. As resources like data and computing power become more limited, test-time compute could be the next frontier, enabling AI to deliver better results by “thinking smarter,” not “working harder.” #ArtificialIntelligence #MachineLearning #AI #Innovation #CloudComputing #Cybersecurity #GRC #TechInsights #DataScience

Cybersecurity is only as strong as the most vulnerable link in the supply chain. The recent Amazon data incident, linked to a third-party property management vendor’s security breach, is a perfect case study on third-party risk management in cybersecurity. While Amazon itself did not experience a direct security breach, the MOVEit vulnerability exposed a vital lesson for companies of all sizes. Key Takeaways: 1?? Understand Vendor Risks: Third-party vendors often hold sensitive data and may not have the same security protocols. Building a secure, vendor-aware ecosystem can reduce vulnerabilities. 2?? Know Your Vulnerabilities: In this case, a critical SQL injection vulnerability in MOVEit software exposed data that a threat actor exploited. Regular security assessments and patching are vital. 3?? Threat Intelligence and Dark Web Monitoring: Once data is exposed, threat actors can sell or distribute it across dark web markets, as in this case with data from Amazon’s vendor. Monitoring these channels can alert organizations to potential threats in their ecosystem. 4?? Resilience through Education: Employees are a key defense. Ensuring they understand cybersecurity risks, especially regarding third-party relationships, can help build a culture of vigilance. As this case shows, security is not just about defending your own systems but also about building resilience throughout your supply chain. #CyberSecurity #ThirdPartyRisk #DataBreach #MOVEit #RiskManagement #DarkWeb #ThreatIntelligence #CyberResilience

The parent company of Stop & Shop and Hannaford, Ahold Delhaize USA, recently disclosed a cybersecurity incident affecting its network across the U.S. Impacted areas included pharmacy operations, online shopping, and the ability to process certain types of payments, leading to some services being temporarily taken offline to secure critical systems. Despite these challenges, stores remained open, with teams working alongside cybersecurity experts and law enforcement to address and mitigate the issue. Hannaford’s website was also down for much of the weekend, which prevented some customers from accessing online services. ?? Key takeaways:? An effective cybersecurity response requires more than just strong defenses; it also needs rapid detection, containment, and clear communication. Ahold Delhaize’s approach—quickly engaging cybersecurity professionals and isolating compromised systems—is a strong example of proactive damage control. Businesses should invest in incident response strategies that address both technical and customer-facing impacts to maintain trust and minimize disruption. Building a comprehensive response plan is essential in a world where cyber threats are evolving daily. #Cybersecurity #IncidentResponse #RetailSecurity #DataProtection #RiskManagement #BusinessContinuity