UK cyber security agency warns of AI-driven
Laurent H. ā CEO & Founder CYBERR & HEELR
š¢ Shared from Cyberr UK
UK cyber security agency warns of AI-driven 'patch wave'
Overhaul software update processes or risk being overwhelmed.
The chief technology officer of the United Kingdom's National Cyber Security Centre (NCSC) has told organisations to deal with their technical debt, or skilled individuals will be able to exploit it at scale and pace with AI.
Due to AI, NCSC CTO Ollie Whitehouse said the government security agency expects there will be a forced correction to address a backlog of technical issues that are expensive and time-consuming, as a result of prioritising short-term gains over building resilient products.
Whitehouse called it a "patch wave", or a rush of software updates that have to be applied to organisations' technology stacks, to address the disclosure of new vulnerabilities.
Organisations should be prepared to patch quickly, more often and at scale, with NCSC arguing that technologies on organisations' perimeter should be prioritised, with work then moving inwards towards cloud and on-premises environments.
The UK cybersecurity agency suggests organisations should enable automatic patching for all devices, and hot patching (no service interruption such as restarts required) as well.
Whitehouse said vendors and technology producers should ensure that systemic technical security debt is minimised through memory safety and containment technologies, as patching alone won't address all problems.
https://www.itnews.com.au/news/uk-cyber-security-agency-warns-of-ai-driven-patch-wave-625555
1 reactions Ā· 0 comments