RSAC: AI, robot attack / defense..

For day 1 I'd like to focus on AI. ChatGPT is a disruptive technology, that's what we learned since November 2022. But what does it mean for hackers but also for incident responders?

What happens when robots can be used to automate scams and attacks?

As the world becomes increasingly connected, the threat of cyberattacks continues to grow. The rise of the Social Revolution and the proliferation of AI technology has created new opportunities for both hackers and incident responders.

On one hand, AI can be used by hackers to launch more sophisticated attacks, making it harder for traditional security measures to keep up. Hackers can use AI to automate attacks, identify vulnerabilities, and even create more convincing phishing emails. This presents a significant threat to individuals and organizations alike.

On the other hand, AI can also be used by incident responders to detect and respond to cyberattacks more effectively. Machine learning algorithms can analyze vast amounts of data to identify patterns and anomalies, helping incident responders to detect and respond to attacks in real-time. This can be critical in minimizing the damage caused by a cyberattack and reducing the risk of future attacks.

As the threat of cyberattacks continues to grow, it is more important than ever for organizations to invest in cybersecurity measures that leverage the power of AI. By staying one step ahead of hackers and using AI to enhance their incident response capabilities, organizations can better protect themselves and their customers from the growing threat of cybercrime.

To summarize I felt two groups, one group is deeply concerned. They believe that the cyber security vendors are not fast enough to keep up with the arising threats around AI. Live-Demos RSAC 2023 have shown how social engineering attacks can be fully automated with ChatGPT with little basic knowledge! They expect the perfect storm, the robots take over the world!

On the other hand, there is also optimism. This is a winable battle. Best of breed or platforms? Today it's possible to have both! Progress must include a mindset shift and this is key to start with..

A last hint:

Question to the audience during an RSA-keynote about ChaptGPT, "who believes the jobs of incident responder will be harmed by that?" Surprisingly not a single hand went up!