Cyber Sins & Security

About Me

Mon, 01 Jan 0001 00:00:00 +0000

A nefarious alchemist and an avid psychonaut with salt-pepper look. Embracing his ADHD superpower, and often evangelizing cybersecurity & mental health in the wicked wild world.

Rishi Narang has more than 18 years of experience in information security which includes research on vulnerabilities, protocol analysis, Red Team, evolving attack vectors and signature development for network & host-based IDS/IPS products. In the past, he has worked as consultant and researcher for firms like FireEye/Mandiant, Gemalto, Qualys, Deloitte and Trend Micro. He has worked closely with application developers following the proactive - sooner the better approach. He recently got diagnized ADHD, and is now trying to make sense of the world with his newfound neurodiverse superpower.

Disclaimer

Mon, 01 Jan 0001 00:00:00 +0000

This website/blog (weblog) is provided to you as-is basis. The opinions expressed are NOT those of (or associated to) my present or any of my previous employers.

While this weblog makes every effort to ensure that the contents within are accurate and complete, this weblog makes no representation or warranty, whether express or implied, as to the operation, integrity, availability or functionality of this weblog or as to the accuracy, completeness or reliability of any information on this weblog. Any person who accesses this weblog or relies on the information contained in this weblog does so at their own risk. All data and information provided on this weblog is for informational purposes only.

Cybersecurity in the Age of AI

Sat, 20 Jan 2024 00:00:00 +0000

Last year, a finance professional joined a video call with colleagues they believed they knew. The meeting felt ordinary. The instructions to move money felt plausible. It was not until later that the organisation discovered something chilling: the voices and faces on the call were not human in the way everyone assumed. This is not science fiction. It is the kind of scenario regulators and the World Economic Forum have discussed in connection with the Arup case, where reporting describes a deepfake-enabled fraud on the order of tens of millions of dollars. The details matter less for day-to-day work than the lesson: trust signals we relied on for decades—voice, face, urgency—are now forgeable at scale.