- \n
- SEO attacks<\/li>\n
- Malvertising<\/li>\n
- Attacks targeting developers<\/li>\n
- Weaponization and overall leveraging of AI\u2014specifically in social engineering<\/li>\n<\/ul>\n
Some of these line up with <\/span>our cybersecurity predictions of 2023<\/a>, which we published back in January. Malicious AI was the first item on our list, with social engineering not too far behind.<\/p>\n
Developers as a target isn\u2019t a new concept, but the emphasis is new. We have seen plenty of attacks over the years where malicious libraries made their way into software in-production, as well as hacked GitHub repositories and other vulnerabilities.<\/p>\n
But there are some items missing, too. There wasn\u2019t a mention of the risks involving <\/span>unprotected IoT<\/a> <\/span>or <\/span>public Wi-Fi<\/a>\u2014both of which pose an increasing threat to organizations. The truth of it all is that all of these threats are inter-connected. Threat actors can leverage AI to be used in social engineering campaigns targeting developers through the use of sophisticated SEO or malvertising. And the attacks themselves can impact IoT and public Wi-Fi in the end. <\/p>\n
The attacks aren\u2019t new, but the sophistication of these threats is only increasing.<\/p>\n
OUR SR. DIRECTOR, LABS TOOK ON COMPASSION IN CYBERSECURITY<\/h2>\n
\u200d<\/p>\n
\n ![\"](\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2023\/06\/rsac-2023-highlights-learnings-and-what-we-won-along-the-way.jpg?w=640&ssl=1\")
<\/div>\n<\/figure>\nRebecca Gazda, our Sr. Director, Labs gave a presentation at RSA called \u201cReducing Cybersecurity Risk Through Caring and Compassionate Leadership.\u201d Her talk centered on how to foster a cybersecurity culture, acknowledging that mistakes will happen. One stat Rebecca shared during her presentation was staggering: 20% of employees will click a phishing link, and 67% of those who click will actually enter their information on a site.<\/p>\n
Placing blame on employees who <\/span>do<\/em> <\/span>fall for these attacks will not create a more secure work culture. Instead, it\u2019s important to turn these into learning moments. Meanwhile, it\u2019s important to share with IT and cybersecurity teams and implement security measures like <\/span>DNSFilter<\/a> <\/span>that will block malicious site clicks.<\/p>\n
\u200d<\/p>\n
AI\u2026ML\u2026WHAT\u2019S THE DIFFERENCE?<\/h2>\n
We\u2019d be remiss if we didn\u2019t talk about AI for just a moment. Big AI announcements were a huge component of RSAC 2023, and it\u2019s not a surprise. With ChatGPT at the center of it all, AI has taken the world by storm in 2023. But there\u2019s more to AI than writing song lyrics or creating images of people who don\u2019t actually exist. And part of the conversation centers around: \u201cWhat is AI, <\/span>really<\/em>? And how does machine learning fit in?\u201d<\/p>\n
Our blog post on <\/span>AI vs. ML<\/a> <\/span>goes into a bit more depth, but here\u2019s a quick rundown:<\/p>\n
AI, artificial intelligence, is a broad concept. But machine learning (ML), is a subset of AI focused on teaching computers how to do things normally done by humans. Our <\/span>domain categorization software Webshrinker<\/a> <\/span>uses machine learning to classify domains up to seven days before competitors. We\u2019ve trained it for more than five years on what certain types of websites look like. Our false positive rate for phishing websites in particular is under 1%.<\/p>\n
ADD DNSFILTER TO THE LIST OF GLOBAL INFOSEC AWARD WINNERS<\/h2>\n
\n ![\"Gwen](\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2023\/06\/rsac-2023-highlights-learnings-and-what-we-won-along-the-way.png?w=640&ssl=1\")
<\/div>\n<\/figure>\n\u200d<\/p>\n
RSAC 2023 was filled with winners. <\/span>And we were thrilled to be one of them<\/a>! Thank you, Cyber Defense Magazine for recognizing us <\/span>along with an impressive list of other security vendors in the space<\/a>. This award means a lot to us, and we couldn\u2019t be happier to hear these words from Gary S. Miliefsky, Publisher of Cyber Defense Magazine: \u201cDNSFilter embodies three major features we judges look for to become winners: understanding tomorrow\u2019s threats, today, providing a cost-effective solution and innovating in unexpected ways that can help mitigate cyber risk and get one step ahead of the next breach.\u201d<\/p>\n
WHAT IT MEANS TO BE #FASTERTOGETHER<\/h2>\n
\n ![\"The](\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2023\/06\/rsac-2023-highlights-learnings-and-what-we-won-along-the-way-1.png?w=640&ssl=1\")
<\/div>\n<\/figure>\n\u200d<\/p>\n
Our team went from San Francisco to Birmingham last week. After RSA wrapped, team members were on the ground for the Children’s of Alabama Indy Grand Prix. As a sponsor of the No. 28 INDY cars of Romain Grosjean and Jamie Chadwick, it was more than exciting to see Romain <\/span>take pole position<\/a> <\/span>for the second time this season and subsequently <\/span>took second<\/a> <\/span>on race day.<\/p>\n
Next up: The <\/span>GMR Grand Prix in Indianapolis on May 12-13<\/a> <\/span>where the No. 28 DNSFilter \/ DHL Honda will finally take the track!<\/p>\n