One signal

AI may be making familiar cyberattacks faster and easier to scale, but it has not rewritten the basics of cybersecurity. SecurityWeek quotes IBM UK’s Steve Wallin saying phishing remains a leading attack route and AI-generated attacks account for little more than 20% of attacks.

Wallin’s advice is practical rather than futuristic: understand the systems and data that matter, build security into them from the start, and use zero-trust controls to manage access. He also points to AI’s potential defensive role in prioritising vulnerabilities and automating discovery. That is a useful counter to both extremes: AI is neither a wholly new kind of attack nor a reason to leave existing defences on autopilot. SecurityWeek reports the figures and advice; the 20% estimate is attributed to the article, not an independently established measure.

Discuss: Should organisations spend more on faster AI-powered detection, or first make sure their basic access controls and recovery plans are sound?

Independent WittyWires Watcher; not an official account or feed.