The SecurityANGLE

In this episode of the SecurityANGLE, host Shelly Kramer, managing director and principal analyst at theCUBE Research is joined by Manoj Saxena, founder and chairman of Trustwise, for a conversation about AI and the role technology can play in AI application performance, risk management, and corporate sustainability initiatives.

Trustwise is officially launching this week with $4 million in seed funding. Its flagship product is Optimize.ai, an API-based Gen AI performance and risk management solution that enterprise developers can use to lower the cost and increase the safety of, as well as the “green-factor” of the AI models they’re building and using.

Manoj is a serial entrepreneur who likes building things, going fast, and helping brilliant people build great companies. He was the first GM of IBM Watson, the founder of Trustwise, and the founder of the Responsible AI Institute, which is focused on driving the adoption of responsible AI through independent AI Conformity Assessments and Certification. He also is the holder of 34 software patents in AI and Web Services.

Our conversation covered:

- Why championing responsible AI is business-mission critical today
- The AI Risk Trifecta, which is comprised of costs, risk, and the environment, and the risk AI presents for each of these
- A discussion about Trustwise's flagship product, Optimize.ai and why this is a solution that organizations need right now.
- An exploration of how Trustwise's Optimize.ai is designed to help organizations with regard to adherence to global standards, policies and regulations, including things like the EU AI Act, NIST SI TMG, the Responsible AI Institute, RAISE Safety and Alignment Benchmarks, and SCI ISO Software Carbon Intensity Standard, to name just a few).
- A discussion of some of the very real challenges for organizations adopting AI but still working to meet their climate change goals and how Optimize.ai can help manage that load and help companies balance what they want to accomplish with their AI-powered initiatives.

In this episode of the SecurityANGLE, Shelley Kramer, managing director and principal analyst at theCUBE Research, is joined by fellow analyst, engineer and member of theCUBE Collective community, Jo Peterson, for a conversation with Cassie Crossley, VP of supply chain security, cybersecurity and product security office at Schneider Electric.

Check out the latest from theCUBE, including upcoming tech events https://www.thecube.net/

Before we dive in, we start with some background on Schneider Electric, a French multinational company specializing in digital transformation and energy management. The company combines energy tech, software, real-time automation and services to transform homes, buildings, data centers, infrastructure and industries. 

Earlier this year, the company launched its new Industrial Digital Transformation Services, which are designed to help industrial enterprises achieve future-ready, innovative, sustainable, effective and end-to-end digital transformation.

Follow theCUBE's wall-to-wall coverage as the roving news desk for SiliconANGLE reports live from tech's top events https://siliconangle.com/category/cube-event-coverage/

Why is there a focus on software supply chain security? Supply chain security is the management of the supply chain that focuses on risk management of external suppliers, vendors, logistics and transportation. It's safe to say that today's supply chain and the security of the supply chain play an outsized role in successful digital transformation initiatives. 

The proliferation of software throughout the tech stack potentially exposes organizations to greater risk than ever before, which makes managing and securing the supply chain crucial when it comes to the ability of vendors to deliver software releases that are trusted and reliable and for end-user customers to know they are using software developed with security as a foundational element. 

Our conversation today covers:

• Why the focus on third-party cyber risk management and what makes that so critically important today?

• Crossley shares suggestions for other supply chain pros on three ways a strong supply chain security program can help identify, analyze and mitigate risks associated with working with outside vendors and organizations as part of your supply chain.

• Smaller firms often don’t have dedicated application or supply chain experts. Crossley shares advice on how organizations of any size can implement a software supply chain security program.

• The Lehigh Business Supply Chain Risk Management Index was released on March 29th showing that cybersecurity was identified as the #1 risk for the fifth straight quarter and, not surprisingly, generative AI has become a concern for supply chain managers. 

Zach Zacharia, associate professor of supply chain management and director for the Center for Supply Chain Research at Lehigh, said that thoughts about generative AI and how that might increase their companies’ vulnerability was identified by survey respondents as the second highest risk after worries about customer risk. Crossley shares her thoughts on the risk generative AI poses as it relates to the software supply chain and gives advice on how to think about navigating that.

• We explore the risks that generative AI brings as it relates to software supply chain and how to combat those, as well as give our thoughts on what makes a supply chain resilient.
 
As we wrap the show, we discuss the reality that there are no established, one-size-fits-all guidelines for software supply chain security, and we leave the audience with thoughts on a few of the crucial elements needed to develop a strategy, as well as give advice on how to get started.

Visit theCUBE Research for the latest in tech news https://thecuberesearch.com/

In this episode of the SecurityANGLE, host Shelly Kramer, managing director and principal analyst at theCUBE Research, is joined by Zscaler’s CSO, Deepen Desai, for a conversation about the findings in the company’s newly released 2024 AI Security Report. The survey relied on more than 18 billion transactions across the company’s cloud security platform, the Zscaler Zero Trust Exchange from April of 2023 to January of 2024.

Follow theCUBE's wall-to-wall coverage as the roving news desk for SiliconANGLE reports live from tech's top events https://siliconangle.com/category/cube-event-coverage/

Zscaler’s ThreatLabz researchers explored how AI/ML tools are being used across the enterprise, and then went deeper, mapping out trends across sectors and geographies. They explored how companies are thinking about AI, how they are integrating AI into their business operations, how they are thinking about security around the use of AI tools and the risks that generative AI brings and how organizations are addressing those AI risks — all things top of mind for many business leaders today.

Visit theCUBE Research for the latest in tech news https://thecuberesearch.com/

In his role as CSO, Deepen is responsible for global security research operations and works with Zscaler’s product teams to ensure security across the Zscaler platform.

Zscaler’s value prop is all about accelerating DX so that customers can be more agile, efficient, resilient, and secure, and the Zscaler Zero Trust Exchange™ platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Distributed across more than 150 data centers globally, the SSE-based Zero Trust Exchange™ is the world’s largest in-line cloud security platform.

Their conversation covered:

- The challenges of leading security operations in the age of AI

- The biggest challenges Zscaler sees customers trying to get arms around as it relates to AI security

- Data from the 2024 AI Security Report, which shares that AI/ML usage skyrocketed by a whopping 594.82% during a nine-month period, rising from 521 million AI/ML driven transactions in April 2023 to 3.1 billion monthly transactions by January of 2024

- Findings from the report on how AI is being used by threat actors to speed cyber campaigns

- The risks associated with the sending and receiving of data from AI tools and how to think about managing that process securely

- The role that blocking plays in the enterprise today in these early days of generative AI, and what some of the most blocked AI applications are today

- Attack surfaces and which of these are the most concerning
Check out the latest from theCUBE, including upcoming tech events https://www.thecube.net/

Catch up on the last episode of the SecurityANGLE
https://www.youtube.com/playlist?list=PLenh213llmcY5rmBToKb51z4uQFMgiTj-

#SecurityANGLE #theCUBEResearch #ZScaler #2024AISecurityReport #CloudSecurity #ZScalerZeroTrustExchange

In this episode of the SecurityANGLE, host Shelly Kramer, managing director and principal analyst at theCUBE Research is joined by fellow analyst Zeus Kerravala, principal of ZK Research, to discuss Fortinet Accelerate 2024, held in Vegas this past week, with a whopping 4,000 people in attendance.

In November 2023, Fortinet announced a reorganization of its business market focus, shifting to laser in on three high-growth, differentiated markets: secure networking, universal SASE, and security operations. With large and growing TAMs in these markets of about $126B in 2023, and predicted to grow to $199B by 2027, there's much opportunity here.s

Kramer and Kerravala discussed Fortinet's shift in terms of focus and why that makes sense, as well as Fortintet's recent move into the leader quadrant for wired and wireless WAN. This is notable, since many think primarily of Fortinet as a security company. And, if we are now thinking of Fortinet as a networking company, we explored how Fortinet stacks up against some key competitors in the networking space.

We explored challenges ahead for Fortinet, speculated on the reasons for the growth of in-person attendance at the Accelerate event, and took a look forward at opportunities on the horizon for Fortinet.

In this episode of the SecurityANGLE, host Shelly Kramer, managing director and principal analyst at theCUBE Research, is joined by fellow analyst, engineer, and member of theCUBE Collective community for a conversation exploring generative AI, security, and law firm readiness for Microsoft 654 Copilot with Jason Thomas. Thomas is the CIO at Cole, Scott, Kisan, one of the AM Law 200 and Florida's largest law firm.

Microsoft Copilot for Microsoft 365 is an enterprise-grade generative AI Assistant and part of the Microsoft application suite designed to enhance user productivity. The AI assistant works in conjunction with Microsoft Teams, Outlook, SharePoint, etc.

Thomas has been the CIO of Cole, Scott, and Kisane for the better part of a decade and it's safe to see he's seen a lot in that time, including the firm's embrace of AI for business process automation and other tasks for quite some time. That's why we wanted to discuss generative AI and how he sees it advancing into the law firm realm and what he sees happening on the adoption front.

Our conversation covered a variety of topics, including:

- Thoughts on the news that global law firm Clifford Chance, with 34 offices across 23 countries and 3,600 lawners rolled out Microsoft 365 and Viva Suite at scale across its entire workforce, which is probably the first and largest instance of international law firms to integrate Microsoft Copilot.

- Where Thomas sees the legal field in general on the adoption of generative AI.

- How CIOs in the legal sector educate lawyers and their teams about Microsoft Copilot and its capabilities, and how discovery teams define processes and maintain them for these new Copilot Discovery tasks.

- What CIOs in the legal field are doing and thinking about access and permissioning for confidential, sensitive, and proprietary data.

- What's ahead from an eDiscovery standpoint: a shift from custodian-centric data to collaborative data and often content-centric data, and what different methods of scoping preservation and collection requests we might see ahead.

We wrapped this show with Jason's advice to legal field practitioners interested in integrating generative AI into their operations, what to think about and where to start.

In this episode of the SecurityANGLE, guest host Jo Peterson, member of theCUBE Collective community of independent analysts, is joined by Chuck Brooks, president of Brooks Consulting. In addition to his strategic consulting work, Brooks is also an adjunct professor at Georgetown University, where he teaches courses on risk management, homeland security, and cybersecurity, as well as a certificate course he designed on blockchain technologies for a conversation about cybersecurity regulation in 2024 and what's happening in that realm.

The conversation reflected on the events of 2023 around cybersecurity regulation including:
Legislative developments we expect to see moving forward as it relates to the regulation of privacy and data security
Discussion on whether we expect to see an increase in civil litigation around data privacy
Trends that pertain to government data collection 
Comparison of the US's Executive Order on AI versus the EU AI Act, and how they differ
Thoughts on national regulation of data privacy in the US
US cybersecurity disclosure rules for public companies
Washington state's My Health, My Data Act and how this has modified the legal landscape, creating data privacy requirements focuses on personal health data for Washignton-based entities and whether we expect more states to follow suit on this
We also explored data minimization and shared what we believe every CISO needs to know about the obligations comprehensive state privacy laws impose on data controllers, who are entities that determine the means and purposes of processing personal consumer data. These obligations include things like data minimization, setting purpose limitations, requiring the maintenance of privacy policies, the requirement of maintaining reasonable administrative, having technical and physical data security controls in place, and contractually requiring processors of personal data or service providers to provide with the applicable law

In this episode of the SecurityANGLE, theCUBE Research's Shelly Kramer is joined by Jo Peterson, analyst, engineer, and member of theCUBE Collective community, for an exploration of four of the most pressing generative AI risks that keep CISOs up at night:

- Model training and attack surface vulnerabilities
- Data privacy
- Corporate intellectual property exposure
- Generative AI jailbreaks and backdoors

After exploring these four major security risks facing organizations today as it relates to generative AI, the conversation turned to an exploration of cybersecurity best practices for using generative AI and advice on where and what to focus on. This includes: Building AI governance in your organization, training and mentoring employees, identifying and classifying corporate data, and understanding how data governance and security tools work best together.

The last part of the episode focused on a quick cybersecurity / AI Security tool roundup from vendors we are tracking. These vendors and their AI security tools include:

In this episode of the SecurityANGLE, theCUBE Research analysts Shelly Kramer and David Linthicum are joined by fellow analyst, engineer, and member of theCUBE Collective community, Jo Peterson, for a conversation about the transformative nature of cloud and AI.

With the global cloud computing marketing expected to reach an estimated $600 billion US in 2024 representing a 30% jump in the span of two years, AI is no doubt playing a role in that acceleration to cloud. 

Our conversation explored managed AI and the rapid adoption we're seeing there, and why that is such an attractive offering. Research from Wiz shows that in the battle for AI dominance, Azure AI, which includes Azure Open AI, is leading the way, with some 39% of responding organizations using the service. We also explored the financial pressure that the demand for AI is putting on cloud infrastructure itself and thoughts on when we might see those investment numbers showing up in earnings reports. 

We discussed security and AI, the novel security vulnerabilities that need to be considered in the age of AI, alongside standard cybersecurity threats, as well as regulation in the EU and US and what's ahead on that front.

In this episode of the SecurityANGLE, host Shelly Kramer, managing director and principal analyst at theCUBE Research is joined by fellow analyst, engineer, and member of theCUBE Collective Community, Jo Peterson and Bil Harmer, operating partner and CISO at Craft Ventures.

Our conversation today centered on the rise of AI-enhanced vishing and smishing attacks, which join phishing attacks as an attractive threat vector for cybercriminals. As organizations of all sizes rush to embrace AI, threat actors are likewise rushing in and wasting no time finding and leveraging AI-powered tech to help supercharge their efforts at wreaking havoc, getting access to data, and infiltrating networks. 

Harmer shares his expertise from 30 years immersed in the tech industry and provides insights for CISOs, executives, and board members on what AI is doing to power phishing, vishing, and smishing attacks and how to protect against them.