Attackers using the latest AI find a way into a system in about 10 hours. The companies defending it take 55 days to close the hole, according to Yukimi Masuda, chief evangelist and executive officer at the cybersecurity firm Proofpoint Japan.
Masuda spoke at the Nagano prefectural government office on November 4, at a meeting of the Economic Security Nagano Network, a group of 16 organizations including the prefectural police, local government bodies, business groups and universities. About 50 executives and staff from member organizations attended.
Masuda said AI-driven attacks do not wait for human judgment, and stressed the importance of preparing in advance.
Cut the network first, ask later
Masuda said system managers should be authorized to decide on their own to shut down and isolate a network once a vulnerability is found. Convening a management meeting to discuss it is too slow, Masuda said.
“I want you to decide that the person in charge of the system may make the call to stop and isolate the network once a vulnerability is known. Calling a board meeting to talk it over is too late.”Yukimi Masuda, chief evangelist and executive officer, Proofpoint Japan
Deciding what to protect first, including by reducing the number of digital assets a company holds, will shape its competitiveness, Masuda said.