What cyber threats are most concerning for your organization in 2023?

[Sean Dahlberg]

We just finished up "The Fundamentals of Zero Trust for Developers: How to Automate and Evolve Your Security Operations" webinar with @brebouch. One of the poll questions during it was: What cyber threats are most concerning for your organization?

Attendees voted as such:

• Phishing - 41%
• Ransomware - 30%
• Denial-of-Service - 17%
• Supply Chain - 7%
• Other - 4%

I'm curious how this matches up to the Cisco Developer Community, so we have a poll up and running that you should be able to see in the sidebar anywhere within the Security area of the Cisco Developer Community (to include in the sidebar for this topic):

https://community.cisco.com/t5/developer-security/ct-p/j-developer-security

What about you? What keeps you up at night when you're thinking about your organization's security?

[bigevilbeard]

Protecting the source code. As the use of code to automate the software development life cycle (SDLC) becomes more prevalent, the value of source code repositories increases. Not only are they the core of any software's intellectual property, but they also contain the blueprint of how applications work and, as such, how to exploit them. Additionally, code repositories now contain key CI/CD settings and Infrastructure as-Code such as Terraform, Cloudformation, and Kubernetes. Hard-coded secrets also present a risk, as attackers can gain control of the entire pipeline by breaching a code repository. As a result, organizations need to be aware of these threats and take steps to protect their source code repositories in 2023.

How far away from Skynet are we?

The advancement of artificial intelligence (AI) as AI-based systems are increasingly being used to automate processes, and they can also be used to launch sophisticated attacks. AI-based attacks can be difficult to detect and defend against.