The use of artificial intelligence (AI) and other emerging technologies in cybersecurity is growing rapidly, with IDC predicting that the AI cybersecurity market will reach $46 billion by 2027. However, companies should not assume that these technologies alone will provide the quickest path to protection against cyber threats.
Verizon’s 2023 Data Breach Investigations Report (DBIR) found that the top methods used by threat actors are still exploiting basic security measures such as vulnerabilities, stolen credentials, and phishing. This highlights the importance of strengthening foundational security.
One of the most pressing considerations for organizations is protecting the password layer. Stolen credentials were involved in 86% of breaches studied, highlighting the need for improved password security. Companies should consider implementing credential screening and other modern practices to eliminate passwords as a threat vector.
While multi-factor authentication (MFA) is an important part of a layered security approach, it is not a foolproof solution. Hackers have found ways to bypass MFA, emphasizing the need for companies to maintain an updated list of compromised passwords and enforce strong credentials throughout the organization.
Phishing is another persistent threat identified by the DBIR. Organizations should invest in both technology and training to combat these scams. Phishing awareness programs and web filters can help reduce the likelihood of falling victim to phishing attacks.
Endpoint security is also crucial, especially in the hybrid work environment where employees use personal devices for work. Companies need to address every type of operating system on their network and implement encryption, intrusion detection tools, device firewalls, and application controls to protect their endpoints.
In conclusion, while AI and emerging technologies are valuable tools in cybersecurity, organizations must first strengthen their foundational security measures. This includes protecting the password layer, addressing phishing threats, and implementing robust endpoint security strategies.
Key points:
1. AI and emerging technologies are not a standalone solution to cybersecurity.
2. Vulnerabilities, stolen credentials, and phishing remain top methods used by threat actors.
3. Organizations should focus on protecting the password layer and eliminating passwords as a threat vector.
4. Multi-factor authentication is important but not foolproof.
5. Phishing awareness programs, web filters, and regular backups are essential to combat phishing threats.
6. Endpoint security is crucial in the hybrid work environment.
7. Foundational security measures must be strengthened before relying on AI and emerging technologies.