The AI shift in cyber risk: why leaders must act now

https://www.cyber.gov.au/about-us/view-all-content/news/five-eyes-cyber-security-agencies-statement

by Khaine • 1 month ago

12 5 1 month ago

cyber.gov.au

catigula• 1 month ago

This is a huge deal.

Can we please stop doing this? It feels super dangerous now.

madazz01• 1 month ago

I think right now is the time to set some protocols, with the fast paced, and mainly not seen publicly, coding and search capabilities of ai, as well as the "make AI, make AI" world we're in, unless clear protcols, objectives, foresight and understanding are needed 100%

Terr_2• 30 days ago

Weird, the page loaded once and then on a revisit (going back to read comments) Firefox gave a "Secure Connection Failed" error.

Curl fails too:

    > GET /about-us/view-all-content/news/five-eyes-cyber-security-agencies-statement HTTP/2
    > Host: www.cyber.gov.au
    > User-Agent: curl/8.5.0
    > Accept: */*
    > 
    * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
    * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
    * old SSL session ID is stale, removing
    * HTTP/2 stream 1 was not closed cleanly: INTERNAL_ERROR (err 2)
    * Connection #0 to host www.cyber.gov.au left intact
    curl: (92) HTTP/2 stream 1 was not closed cleanly: INTERNAL_ERROR (err 2)

At first I thought it might--rather ironically--be a certificate problem from a cybersecurity site, but it seems something weirder is going on. Adding --http1.1 causes curl to just hang waiting for data.

Terr_2• 30 days ago

Some hours later, exact same problem: First page load is fine, then after a force-refresh the site stops responding even to curl.

So not a coincidental problem with the site being overloaded, perhaps they've misconfigured some kind of "No Non-Austrialn IP's Allowed" system?

Maybe next time I'll try accessing their "Contact Us" page, and gradually find a way to notify their staff. :P

quesomaster9000• 30 days ago

Great, by "remain ahead" this implicitly means "put everybody else behind". These are the same people that are pushing for "think of the children" internet and VPN KYC.

Let me translate this for you:

- Secure-by-design and secure-by-default must become standard practice – not an aspiration.

This means we will enforce censorship of many many topics, often broadly, even egregiously, and at the whims of whichever policy wig is trying to climb the ladder.

- Resilience cannot depend on a single solution or technology. Defence in depth remains essential.

This means it will be wide sweeping policy applied to anything tangentially related to "AI" - pushing the compliance burden down onto everybody, luckily a small number of firms will profit massively from this due to regulatory capture.

- As AI systems evolve, new and previously unknown vulnerabilities will emerge, including zero‑day vulnerabilities.

This means we're realizing that so much software is utter shite, instead of letting people fix it we will bury our heads in the sands and only allow approved government contractors access to models which can fix vulnerabilities (fixing them requires finding them too)

The rapid pace of frontier AI development means cyber risk assumptions can become outdated in months, not years. We must act before and be prepared to adapt and withstand evolving threats.

This means "We're fucked, and we know it, this will be rushed through parliament and congress, basically the "AI Patriot Act" on steroids as a "temporary measure", to try and keep ahead of the curve.

The AI shift in cyber risk: why leaders must act now

Related Stories