Kahneman, ‘Where’s Waldo’ and the Nexus pass: A CISO’s mental model for the AI era

Security awareness training as a phishing defense is obsolete in the AI era, where attacks are fluent and surface-level tells no longer exist. Drawing on Kahneman's System 1/2 framework applied at the organizational level, the argument is that companies should stop relying on human vigilance and instead audit their operational 'fast lanes' — processes where trust was granted and friction removed. Using the analogy of trusted-traveler programs like Nexus, the piece advocates for risk-tiered process design: identifying which fast paths were built on outdated assumptions and re-tiering them. It also calls out the trust inversion where employees face constant authentication while suppliers receive long-lived access based on a SOC 2 report, a gap attackers routinely exploit.

Nguồn: https://www.csoonline.com/article/4188477/kahneman-wheres-waldo-and-the-nexus-pass-a-cisos-mental-model-for-the-ai-era.html. 8sync News chỉ tóm tắt và dẫn link; bản quyền nội dung thuộc tác giả và nguồn gốc.

Đề xuất cho bạn

BleepingComputer03 phút6 giờ trước

Bluekit phishing kit adopts browser-in-the-middle for login theft

Bluekit, a phishing-as-a-service platform first documented in April, has evolved to include browser-in-the-middle (BitM) capabilities using the open-source JavaScript library rrweb. This technique streams the legitimate login page's DOM to victims over WebSocket, allowing attackers to capture credentials and session tokens while bypassing MFA. The platform also features sophisticated anti-analysis defenses including randomized CSS filters, obfuscated JavaScript bundles, custom CAPTCHAs, browser fingerprinting, and WebRTC-based VPN/proxy detection. Nearly 70 new hostnames were identified in the past week, indicating active expansion. Indicators of Bluekit activity include WebSocket connections sending encrypted data on login pages and CSS filter manipulation on top-level HTML elements.

#phishingNguồn