David Lindner, Director, Application Security

AppSec Observer

Insight #1 WormGPT is a thing. The tool — being sold on hacker forums and considered “ChatGPT’s evil cousin” — shows that cybercriminals are taking advantage of Large Language Models (LLMs) to produce detection-resilient cyberattacks and phishes. It’s uber important that your controls and detections adapt to the changing landscape ... Read More

Insight #1 Big news from Contrast! I’m proud to announce that we’re open sourcing our internal AI policy. By sharing our AI policy with the world, we’re promoting greater transparency and accountability in the development and deployment of AI technologies. Learn more in our blog: https://lnkd.in/gRbqXWW7Special thanks to our co-founder ... Read More

Contrast Security is announcing the launch of the Contrast Responsible AI Policy Project, a pioneering initiative in the realm of Artificial Intelligence (AI) utilization. In our commitment to democratize responsible AI practices, we are open-sourcing our company’s internal AI policy under the Creative Commons Attribution-ShareAlike 4.0 (CC BY-SA 4.0) license ... Read More

Insight #1 "AI is not going to solve the 20-plus-year-old problem of Application Security, but it will do one of two things…add to the noise of SAST or kill off SAST completely allowing businesses to move on to bigger and better runtime analysis of their applications. I vote for the ... Read More

Insight #1 " Cyber insurance premiums have skyrocketed (50%) because of ransomware, and there is no end in sight. Not only are we still paying ransoms, but we are using insurance to do it."   Insight #2 " Do not rely on ChatGPT for therapy or medical diagnoses - these ... Read More

Insight #1 " Treat AI-generated code as inaccurate and insecure from the start and make sure it goes through all the same security reviews as manually generated code."   Insight #2 " CISOs are moving to boards as most are realizing having both business acumen and technical expertise are needed ... Read More

Insight #1 "AI scams are on the rise. It’s time for extra diligence when interacting with anything claiming to be AI."   Insight #2 "FEDRAMP released rev 5 this week. Those of you with a FEDRAMP ATO have 1 year to comply with the new version."   Insight #3 " ... Read More

Insight #1 "An OWASP Top Ten for Generative AI has spawned. This will be fun to follow!"   Insight #2 "It costs more to pay a ransom and recover than it does to not pay a ransom and recover, cyber insurers are starting to notice."   Insight #3 "It’s been ... Read More

Insight #1 " Be extremely careful of ChatGPT lookalikes and fakes as scammers are taking advantage of the buzz and tricking victims into biting."   Insight #2 " There is no need for .zip or .mov top-level domains (TLD) unless you are a malicious actor. These should be removed immediately." ... Read More

Insight #1 "Privacy is becoming a problem for many organizations. In a 2023 report by IAPP, 80% of consumers sometimes or always stop doing business with a company after a breach."   Insight #2 "We need to start treating all data as regulated data and if you collect data for ... Read More