CISO Corner covering AI, supply chain, security platforms, and awareness

TLDR:

• AI security platforms by Microsoft, Google, and Simbian are in the works to automate cybersecurity tasks.
• MLBOMs are crucial for securing the AI/ML supply chain and providing transparency and control.

Dark Reading’s CISO Corner provides insights into the latest trends in cybersecurity operations. This week’s digest covers the race for AI-powered security platforms, MLBOMs for securing the AI/ML supply chain, the fight for cybersecurity awareness, an ambitious training initiative tapping talents of the blind and visually impaired, a cybercrime group targeting financial data, the XZ Utils scare exposing software security vulnerabilities, and NSA updates on zero-trust advice.

Microsoft, Google, and Simbian are developing generative AI systems to automate cybersecurity tasks, aiming to alleviate the strain on cybersecurity teams. MLBOMs are recommended for securing the AI/ML supply chain by providing transparency and control. Building cybersecurity awareness through training initiatives is crucial to creating a safer digital environment. The opportunity to tap into the talent of the blind and visually impaired for cybersecurity careers is being explored through innovative training programs. Vietnamese cybercrime group CoralRaider is targeting financial data, highlighting the importance of robust cybersecurity measures. The XZ Utils scare underscores the vulnerabilities in open source code used by enterprises. NSA continues to update guidance on zero-trust advice, emphasizing data protection measures to reduce attack surfaces.