Data leaks dominate cybersecurity conference

At the 26th edition of the Cybersecurity Assises, held from October 7 to 9 in Monaco, data leaks emerged as a central topic of discussion among cybersecurity professionals. The event, attended by thousands of CISOs and experts, focused on the growing threat of data breaches and the role of artificial intelligence in both exacerbating and mitigating these risks.

High-profile cases drive the conversation

Joseph Fernando, a sales engineer at Cato Networks, noted that data leaks have become the main topic of conversation, driven by high-profile cases such as the one affecting the French Shooting Federation. Eric Boivin, a technical specialist at the Flare platform, highlighted the increased media attention and public awareness surrounding data leaks.

Shift in attitude toward data leaks

Sébastien Weber, vice president of sales for southern Europe at Mimecast, stated that the discussion on data leaks has finally been opened up, with CISOs now more transparent about compromises and leaks. He noted that the normalization of data leaks has led to a shift in attitude, with some organizations admitting to having a compromised account per day.

AI as a potential threat

AI was identified as a potential catalyst for the industrialization of data leaks. Olivier Daloy, CISO in residence at Zscaler, warned that AI could significantly increase the scale of data breaches, although he emphasized that other critical issues, such as the ability of attackers to intrude and propagate laterally, should not be overlooked.

Risks of unmonitored AI use

Joseph Fernando also raised concerns about "shadow AI," where employees may be inserting company data into unauthorized AI systems without understanding the risks. Sébastien Weber expressed regret that employees are encouraged to use AI without proper explanation of its operation, which could lead to massive data leaks.

AI also seen as a cybersecurity tool

Despite these concerns, AI was also seen as an opportunity to enhance cybersecurity. Raphaël Marichez, chief security officer at Palo Alto Networks, noted that the automation of security operations, once considered a marketing tactic, is now seen as a necessity.

Criticism of ANSSI's approach

Vincent Strubel, director general of the ANSSI, faced criticism for his speech at the conference, which was seen by some as too abstract. While he called for self-criticism and transparency regarding data leaks affecting the state, critics such as Olivier Daloy and Nicolas Arpagian, chief strategy officer at Jizô AI, argued that the speech lacked clear, actionable guidance for companies to improve their cybersecurity. They suggested that the ANSSI should have provided a pragmatic list of steps for companies to follow.