Srsly Risky Biz: Data extortion is booming. Hooray!
Summary
James Wilson and Tom Uren discuss the rise of data extortion over encrypting ransomware, noting it targets wealthy firms like law practices with less societal disruption. They argue governments should prioritize disrupting traditional ransomware while leveraging AI to advance "secure by design" principles. The episode explores how AI harnesses and potential liability reforms could democratize secure coding standards for developers.
Topics discussed
Intro, sponsor Island Security, and episode overview
Data extortion vs ransomware and Secure by Design in AI age
Why data extortion is more effective than file encryption
Policy implications: Targeting high-value firms vs public harm
Tactics of Silent Ransom and Blackfile cyber groups
Government strategy: Prioritizing disruption of encrypting ransomware
Secure by Design history and AI's role in code generation
Using AI harnesses and pipelines to improve code security
Centralized vs decentralized approaches to AI security standards
Liability, EULAs, and verifiable AI attestation for code
Listen ad-free on Castria