cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
dcontesti
Community Champion

SentinelOne CEO: Cybersecurity Shouldn’t Require Constant Updates

I read this post with great interest.

 

https://www.crn.com/news/security/2024/sentinelone-ceo-cybersecurity-shouldn-t-require-constant-upda...

 

I am hoping that some the thoughts, comments made may be out of context or am I missing something?

 

Wonder if the bad actors will stop investigating or looking for vulnerabilities.

 

 

3 Replies
Caute_cautim
Community Champion

@dcontesti  From which planet did this CEO come from (Zog?), and did he actually do time as a software developer?

 

Planet Zog referring to Flash Gordon.

 

Given the speed that bad actors are using AI to identify suitable and viable avenues of attack from disclosures and notifications, of course we need to up our game and apply similar techniques to reduce the likelihood of organisations being compromised.   Or perhaps some more forethought to applying countermeasures else where to reduce the impact of identified vulnerabilities to provide a breathing space for actual testing and acceptance before release?   Or Threat Management.

 

Then it becomes a game of cat and mouse or even WhacaMole.

 

All humans make mistakes, this is why we have review processes, peer review, testing regimes or non-production systems to ensure reduce the risk associated with updating software etc.

 

Regards

 

Caute_Cautim

dcontesti
Community Champion

@Caute_cautim   Totally agree with everything that you have said.

 

Yes Zog is a good place for him

 

I was /am hoping that this is fake news but for some reason, I doubt it

 

One side of wishes it was true that we didn't need to patch, etc. so regularly and maybe give folks a chance to breath but we know that is not going to happen.

 

Steve-Wilme
Advocate II

It sounds entirely like wishful thinking.  

 

It's not clearly exactly how AI could reliably modify protection to defend against unique exploits, if it hadn't seen a variant of the exploit previously.  And I suspect there are liability issues to consider if AI identifies a false positive and reacts to block what it falsely identifies as an exploit if it effectively causes an outage. 

 

-----------------------------------------------------------
Steve Wilme CISSP-ISSAP, ISSMP MCIIS