We Must Know Our Enemy in Cybersecurity
AI makes protecting our digital technology, assets, and data more challenging. Cybersecurity must adapt as threats are becoming more powerful with AI.
We must know our enemy.
If we only focus our attention on our posture, we miss some of the most critical aspects to defense: the targets, objectives, capabilities, and likely methods of the threat agents that seek to cause harms.
Full keynote video: https://www.youtube.com/watch?v=4sqnRyP1R64
Agree that posture alone isn't enough. Knowing the enemy also means knowing their infrastructure. Attackers reuse registrant details, nameservers and mail servers across campaigns, and that reuse is something defenders can track. Threat feeds built on those shared-infrastructure pivots (e.g. https://whoisfreaks.com/products/threat-intelligence-feed) turn "know your enemy" into a daily blocklist.