AI dominates headlines and cybersecurity still a concern

Elon Musk creates A.I. startup called X.AI to take on OpenAI’s ChatGPT

Elon Musk is reportedly launching a new artificial intelligence (AI) startup, X.AI, which will directly compete with OpenAI. Musk incorporated X.AI in Nevada and authorized the sale of 100 million shares for the privately-held company. He is currently assembling a team of AI researchers and engineers, recruiting from leading AI companies like DeepMind. Investors in SpaceX and Tesla have been approached for backing Musk's new AI startup, with some already expressing excitement. This move comes as Musk has voiced concerns about the potential dangers of AI and the need for regulation and oversight. He co-founded OpenAI in 2015 but left its board in 2018, citing potential conflicts of interest with his work at Tesla. Recently, Musk purchased approximately 10,000 graphics processing units (GPU) for his new AI project.

Why it matters:

• Increased competition: Elon Musk's new AI startup, X.AI, will compete directly with OpenAI, potentially spurring innovation and advancements in the AI field as both companies vie for dominance.
• Investor interest: The involvement of prominent investors in SpaceX and Tesla in Musk's new venture indicates strong backing and financial support, which could help the company quickly gain traction and resources.
• Musk's influence: As a prominent entrepreneur and visionary, Elon Musk's entry into the AI market could attract significant public attention and talent to the new company, potentially accelerating its growth and impact on the industry.
• Ethical concerns: Musk has previously expressed concerns about the potential dangers of AI and the need for regulation and oversight. His new venture might place a stronger emphasis on ethical AI development, which could influence industry standards and practices.
• Diversification of AI applications: With Musk's experience in various sectors, such as electric vehicles, space exploration, and renewable energy, the new AI startup may explore and develop AI applications in diverse industries, further expanding the reach of AI technology.
• Collaboration and partnerships: X.AI's entry into the AI market may lead to new partnerships and collaborations with other tech companies, research institutions, or government organizations, fostering a more interconnected AI ecosystem.
• Impact on OpenAI: The launch of X.AI could affect OpenAI's position in the AI market, prompting it to adapt its strategies and priorities to maintain its competitive edge.

What Are Passkeys and How Can I Use Them?

Passkeys, digital credentials stored on phones or computers, could soon replace passwords as a more secure and convenient authentication method. Passkeys are generated using public-key cryptography and require users to sign in to their devices with a PIN, swipe pattern, or biometrics. The passkeys ensure a secure connection between users' devices and their online accounts, minimizing human error in password security and authorization steps. Major tech companies like Apple, Google, and Microsoft support passkeys and are encouraging users to adopt them. However, it will take time for websites to integrate passkey support, so passwords will not become obsolete overnight.

Why it matters:

• Enhanced security: Passkeys provide a more secure authentication method compared to traditional passwords, reducing the risk of unauthorized access and data breaches for software developers and consultants working on sensitive projects.
• Streamlined authentication: Passkeys simplify the authentication process, reducing the reliance on remembering complex passwords and using two-factor authentication, which can save time and increase efficiency for developers and consultants.
• Adoption of new standards: As major tech companies like Apple, Google, and Microsoft support passkeys, software developers and consultants may need to integrate passkey authentication into their projects or advise clients on implementing this technology.
• User experience improvements: The convenience and ease of use of passkeys can enhance user experience, an important factor for developers and consultants when designing software and web applications.
• Competitive advantage: Staying informed about and adopting new security technologies like passkeys can give software developers and consultants a competitive edge, as clients increasingly demand cutting-edge and secure solutions.
• Privacy protection: With passkeys minimizing the risk of password theft and data breaches, developers and consultants can better protect their clients' data privacy, meeting compliance requirements and building trust.
• Transition management: As passkeys gain popularity, developers and consultants may need to assist clients in managing the transition from traditional password-based systems to passkey-enabled authentication, including user training and support.

Why Banning TikTok Would Be a Cybersecurity Disaster

The U.S. government has proposed banning TikTok over privacy and security concerns, but the potential cybersecurity risks of attempting to ban the app have not been discussed. Blocking TikTok in the network can be bypassed using virtual private networks or by changing DNS settings, potentially exposing users to malicious DNS servers and putting their data at risk. Banning the TikTok mobile app could lead users to sideload the app from untrusted sources, increasing the risk of installing malicious apps. Enforcing a ban on existing installations might encourage users to disable security controls or jailbreak/root their devices, further weakening their security. A TikTok ban might be difficult to enforce technologically and could lead users to engage in riskier digital behavior.

Why this matters:

• Privacy concerns: The U.S. government has proposed banning TikTok due to privacy and security concerns, reflecting the increasing importance of data protection.
• Cybersecurity risks: Attempting to ban TikTok could introduce new cybersecurity risks, such as users bypassing security mechanisms and exposing themselves to malicious servers or apps.
• Sideloading dangers: Banning the TikTok mobile app could lead users to sideload apps from untrusted sources, increasing the likelihood of downloading malicious software.
• Weakened security controls: Users might disable security controls or jailbreak/root their devices to avoid app removal, making their devices more vulnerable to attacks.
• Technological challenges: Implementing a ban on TikTok could be difficult due to the ease of bypassing restrictions, leading to a potential game of cat and mouse between authorities and users.
• Unintended consequences: A TikTok ban could motivate users to engage in riskier digital behavior, undermining the original goal of improving cybersecurity.
• Policy implications: The TikTok case highlights the challenges and potential unintended consequences of regulating and banning apps for security and privacy reasons.

OpenAI starts bug bounty program with cash rewards up to $20,000

Microsoft-backed OpenAI has launched a bug bounty program, partnering with Bugcrowd to manage submissions and rewards. The program invites security researchers, ethical hackers, and technology enthusiasts to help identify and address vulnerabilities in OpenAI's generative AI systems. Cash rewards range from $200 for low-severity findings to up to $20,000 for exceptional discoveries. The program covers API targets, ChatGPT, third-party corporate targets, OpenAI API keys, and the OpenAI research organization. Issues related to model prompts and responses are out of scope unless they have a verifiable security impact on an in-scope service. This move comes after ChatGPT experienced a security incident last month due to a Redis client open source library bug, leading to an outage and data leak.

Why it matters:

• AI vulnerability awareness: Developers and consultants should be aware of potential vulnerabilities in generative AI systems to ensure secure implementations.
• Collaboration opportunity: The bug bounty program offers a chance for professionals to contribute to improving AI system security and earn rewards.
• Enhanced security: Addressing vulnerabilities will lead to more secure AI solutions, benefiting clients and promoting responsible AI usage.
• Learning from incidents: Recent security incidents, like the ChatGPT data leak, underline the importance of proactive security measures for AI systems.
• Industry trend: OpenAI's bug bounty program may encourage other AI companies to adopt similar initiatives, increasing the overall security of AI solutions.

66% of Australian Organisations Suffer from Data Bias, According to Progress Research Study

A global survey by Progress called "Data Bias: The Hidden Risk of AI" reveals that most organisations are aware of the importance of mitigating data bias and its prevalence within their businesses but struggle to address it effectively. The survey, conducted by Insight Avenue, interviewed over 640 business and IT professionals who use data for decision-making and are using or planning to use AI and machine learning (ML). Results showed that 86% of Australian business and IT decision-makers believe data bias will become a bigger concern as AI/ML use increases. However, 34% have not looked into technology and tools to help tackle data bias. The main barriers identified include a lack of awareness and understanding of potential biases, identifying data bias, and the absence of expert resources such as data scientists.

Why it matters:

• Awareness of data bias: Developers and consultants need to be aware of the prevalence and potential risks associated with data bias in AI/ML systems.
• Developing fair and transparent systems: They play a crucial role in ensuring that AI/ML applications are unbiased, maintaining trust in the technology and adhering to ethical standards.
• Informed decision-making: Understanding the challenges of data bias helps them make informed decisions on tools, technologies, and processes to tackle it effectively.
• Staying updated on best practices: Developers and consultants should be knowledgeable about the latest methodologies for identifying and mitigating data bias.
• Enhancing solution quality: Addressing data bias contributes to better AI/ML solutions provided to clients, ensuring responsible use of the technology.
• Legal and financial implications: Being aware of and addressing data bias can help prevent potential legal issues, ethical concerns, and financial losses for their clients.
• Expert resource demand: The growing concern around data bias increases the demand for expert resources, such as data scientists, in the industry.

Cohesity expands partnership with Microsoft for security and cloud integrations

Data backup and management vendor Cohesity has expanded its partnership with Microsoft to help IT and SecOps leaders defend against cyber threats and make Cohesity Cloud Services available on Azure. Cohesity's DataProtect backup and recovery solution now integrates with Microsoft Sentinel, providing streamlined access to incident reporting and ransomware alerts. The partnership also offers seamless integration with Azure Active Directory and data intelligence in privacy and security across Microsoft environments. Cohesity Cloud Services will be available on Azure, allowing Microsoft partners to protect and share data across hybrid environments. Additionally, Cohesity's DataProtect now supports Microsoft 365 for data protection and recovery capabilities.

Why it matters:

• Enhanced security: The partnership between Cohesity and Microsoft offers improved security measures, helping developers and consultants provide more secure solutions to their clients.
• Streamlined integration: The integration of Cohesity's DataProtect with Microsoft Sentinel simplifies incident reporting and ransomware alerts for developers working with these platforms.
• Azure Active Directory integration: Seamless integration with Azure Active Directory enables secure access management for Cohesity's products, making it easier for developers and consultants to manage and deploy these services.
• Hybrid environment support: Cohesity Cloud Services on Azure allows developers and consultants to create solutions that can protect and share data across hybrid environments, offering flexibility to clients.
• Microsoft 365 data protection: Developers and consultants can now better protect their clients' critical Microsoft 365 data using Cohesity's DataProtect, which now supports Microsoft 365.
• Partner opportunities: The expanded partnership between Cohesity and Microsoft benefits partners, allowing them to develop customer offerings that include both parties' solutions or enhance their value-added services.