The rise in AI-generated safety threats could have generated one casualty: the demise of the weekly bulletin of safety threats from the US Cybersecurity Infrastructure and Safety Company (CISA).
The company will discontinue its weekly bulletin of recognized vulnerabilities from September 28. It mentioned that it’s taking this step due to the not too long ago launched Binding Operational Directive (BOD 26-04), which compels US businesses to prioritize patching vulnerabilities in accordance with real-world threat elements. These will embrace proof of vulnerabilities being recognized within the wild, versus the earlier criterion of severity scores. It’s not clear why the company can’t proceed to subject weekly bulletins whereas complying with the calls for of BOD.
What could possibly be a extra urgent subject for CISA is the proliferation of AI-generated threats. Earlier this month, the company issued a warning about dangerous actors threatening AI-developed belongings and utilizing them to launch new assaults.
