André Årnes

Cyber Security Partner WLC & Professor @NTNU | Security leadership, cyber security, digital forensics, and technology at large

[André Årnes @andreaarnes]

Join us for a joint webinar on real-world #5G security, #cybersecurity regulations, and frameworks with @philpraxis from @p1security on October 9th. Register now!
https://t.co/uB0ELi0GQn #securityleadership

[André Årnes @andreaarnes]

On #cloudsecurity #securitynightmare from @CSOonline - | temporary resources are a threat | IT inventory | increased cloud bills | identity provider outages | SaaS security | dangling DNS pointers | unmanaged API access | metadata exposure |

https://t.co/g3I0aS6Jei #cybersecurity #securityleadership

[André Årnes @andreaarnes]

Should you train #AI with its own generated content? No, says @ConversationUK, highlighting risks of #modelcollapse with deteriorating quality and diversity.

[The Conversation @ConversationUK]

"As AI-generated content becomes systematically homogeneous, we risk losing socio-cultural diversity and some groups of people could even experience cultural erasure.

"Human interactions and human data are important, and we should protect them."
https://t.co/2zan3MOcql

#AI

[André Årnes @andreaarnes]

@IEEESpectrum also published an informative background article on the new @NIST #postquantumcryptography Federal Information Processing Standards (FIPS). https://t.co/7bvrG7tW2J #cybersecurity #securityleadership

[André Årnes @andreaarnes]

@NIST just announces three Federal Information Processing Standards (FIPS) for #PostQuantumCryptography, with a recommendation to start transitioning to the new algorithms as soon as possible.

https://t.co/6g1XCmYVP6

#cybersecurity #securityleadership

[André Årnes @andreaarnes]

In another post on the @OpenAI
#GPT4o risk assessment, @arstechnica highlights how it unexpectedly began speaking in a user's cloned voice during testing. https://t.co/qmibG67znT

[André Årnes @andreaarnes]

@WIRED on @OpenAI risk assessment of GPT-4o, focusing on the risk of emotional reliance in the voice mode (anthropomorphization). Other risks include #societalbias, #disinformation, unauthorized voice, copyright violations, and #cybersecurity. https://t.co/3V00f6syVH

[André Årnes @andreaarnes]

How is quantum physics applied to security? @IEEESpectrum @MargoIEEE on the development of quantum key distribution (QKD), which is complementary to post-quantum cryptography (PQC). https://t.co/ils5No96jX #CyberSecurity

[André Årnes @andreaarnes]

More on the UN #cybercrime treaty by @sciam highlighting the concerns regarding invasive digital surveillance and threats to human rights https://t.co/NJmgvLb1AQ

[André Årnes @andreaarnes]

@TheRecord_Media on the new UN cybercrime treaty, which was just unanimously passed. It establishes a legal framework for global cybercrime and data access. Notably, human rights and big tech are concerned about the potential misuse of #digitalevidence https://t.co/CEgX1QHJwD

[André Årnes @andreaarnes]

Enabling visibility of SaaS environments is key to #cybersecurity. SaaS represents a simplified #killchain with several steps eliminated in @MITREattack shows research from @AppOmniSecurity, presented at #BlackHat2024 https://t.co/av7rrNyguf #securityleadership

[André Årnes @andreaarnes]

@OpenAI's risk assessment ("system card") for GPT-4o is available here, outlining the methodology used, including a description of the external red team testing. https://t.co/Wzudt76LT5

[André Årnes @andreaarnes]

@Microsoft is making security a top priority by measuring all employees on their contribution to security. In the end, security is about culture and people! #securityleadership #cybersecurity

[The Verge @verge]

Every Microsoft employee is now being judged on their security work https://t.co/dIE31Rodiu

[André Årnes @andreaarnes]

@MIT research on uncertainty quantification in #AI - when to trust an AI model? https://t.co/7xMOC1AH8G

[André Årnes @andreaarnes]

@WIRED article on the privacy risks of OpenAIs new flagship model, GPT-4o. Can GPT-4o Be Trusted With Your Private Data? https://t.co/pieWCehBPt #securityleadership #cybersecurity #dataprotection

[André Årnes @andreaarnes]

There's also 9 RFIs out for a portfolio of #cybersecurity and #dataprotection cloud based products for the Norwegian public sector - deadline August 22nd: https://t.co/FGQf3lMSSl

[André Årnes @andreaarnes]

Happy to support this important Cyber Risk Score initiative for strengthening cyber security across the public sector in Norway: https://t.co/9haI8fASiy @riskrecon #Norway #CyberSecurity #securityleadership