In a recent interview with The Cyber Express, Juhani Hintikka, the CEO and Chairman of WithSecure, discussed the evolving landscape of cybersecurity and the importance of outcome-based cybersecurity for companies of all sizes.
Hintikka emphasized that outcome-based cybersecurity has the potential to be extremely effective for large enterprises. However, he acknowledged the challenges of implementing such a system for startups and smaller companies. Despite these concerns, statistics reveal that small businesses are at significant risk, as around 40% of cyberattack logs belong to smaller companies.
To address this issue, Hintikka introduced the concept of “core security”, which focuses on providing cutting-edge tools and services to startups and smaller companies. WithSecure is dedicated to working in tandem with these businesses, offering not only tools but also managed or monitoring services that run 24/7 to ensure optimal security.
The recent merger between WithSecure and F-Secure marks a strategic shift for the company. While F-Secure primarily catered to consumers, WithSecure is now focusing on the B2B sector, particularly the mid-market. With over 135,000 customers, of which 125,000 belong to the mid to small category, WithSecure is uniquely positioned to understand and address the specific challenges faced by these companies.
One of the significant challenges in contemporary cybersecurity is the potential use of artificial intelligence (AI) in phishing attacks. Traditional employee training to detect phishing attempts often relies on spotting semantic errors in suspicious emails. However, with the advancement of AI, these emails are becoming more sophisticated and harder to detect. Hintikka envisions the future of cybersecurity as a battle between “good AI” and “bad AI”. While there are current defenses that utilize AI for anomaly detection, offensive cyberattacks using AI have not yet been significant.
However, tools like ChatGPT, which can potentially be weaponized to write mutated malware samples, may change this scenario in the near future. Hintikka suggests that companies need to evolve their defenses and integrate security into their operational processes. While AI will play a significant role, humans will remain an integral part of the cybersecurity equation. The emphasis should be on educating and training individuals, as they often serve as the weakest link in the cybersecurity chain.
Looking ahead, Hintikka predicts a clash between AI-driven defenses and offenses in the evolution of cyberattacks. The key for companies will be to ensure that security is integrated from the ground up, designing every process with security in mind. In this rapidly advancing technological age, companies like WithSecure play a crucial role. Their commitment to both technology and the human element ensures a holistic approach to cybersecurity, making the digital landscape a safer place for businesses of all sizes.