Tom Kellermann, vice president of cyber risk at HITRUST, emphasizes the evolving threat of island hopping, which now extends beyond traditional networks to include cloud infrastructures, APIs, and AI tools. As geopolitical tensions escalate, attackers utilize agentic AI to embed themselves within organizations, compromising customer and partner systems. Kellermann underscores the critical need for updated third-party risk management practices, including AI security assessments, enhanced certifications, and revised service-level agreements (SLAs). He cautions that many organizations underestimate the severity of ransomware threats, particularly the hidden risks of remote access tools (RATs) and rootkits. In a recent interview with Information Security Media Group, Kellermann highlighted the necessity of addressing model poisoning and persistence within AI assessments to counter modern supply chain vulnerabilities. His extensive background includes leadership roles in cybersecurity strategy across various organizations, indicating his expertise in navigating contemporary cyber threats.
Source link
