2024 Cybersecurity Agendas

Mahmut Küçük, Director of Cybersecurity at Türk Telekom, discussed the cybersecurity agenda for 2024 with the Wise TV Security Platform.

Examining the topic of Generative AI—which was a key focus in 2023—from a different perspective, Mahmut Küçük also addressed strategies for combating ransomware attacks and explored “Zero Trust” approaches for 2024. I imagine that the threats posed by generative AI—which entered our lives last year—are on everyone’s mind. While we strive to leverage AI alongside security products to make security faster, more effective, and of higher quality, the potential for generative AI to be exploited by attackers—or for attack tools to be enhanced with AI capabilities—significantly elevates the level of threat and risk we face. In this context, I believe that establishing legal frameworks, implementing regulatory measures for AI usage, defining corporate approaches, and integrating AI-related policies into information security strategies will be among the most critical topics this year. Another major concern is the sharp rise in ransomware attacks. We have seen—and will continue to see—threat actor groups, particularly those operating as “ransomware-as-a-service” providers, playing an increasingly active role. These groups exploit vulnerabilities related to remote work and remote access—issues that have become more pronounced in companies since the pandemic. We have already begun to see a more unified stance against ransomware attackers, supported by state authorities—including law enforcement and public cybersecurity agencies—and I expect this trend to intensify this year. We have reached a point where the severe consequences of these attacks—namely, massive data loss and financial damage—are receiving greater attention. Naturally, a perennial topic on our agenda is the development of new cybersecurity approaches to address emerging technologies. In particular, we will see the “zero trust” model being implemented and becoming more widely adopted. The concept of zero trust… “…there was a bit of confusion in the early years. Everyone interpreted it differently, attempting to sell their products by aggressively marketing them under this banner. However, I believe we will now begin to see a better understanding of this concept, with companies actively working to implement it.”

Threats Posed by Generative AI
With the rapid advancement of technology in recent years, generative AI has entered our lives and revolutionized many fields. Yet, these innovations have also brought certain threats. While integrating AI into security products has the potential to make security measures faster and more effective, it also carries the risk of being exploited by malicious actors. This situation necessitates a re-evaluation of both legal frameworks and corporate information security policies.

Artificial Intelligence and Security Products
Integrating AI into security products has the potential to streamline security processes, making them faster and more efficient. Such integration can facilitate the rapid detection and prevention of threats. However, it is crucial that the AI ​​is trained and managed correctly throughout this process.

The Use of AI by Malicious Actors
The use of generative AI by attackers is a factor that amplifies security threats. By leveraging AI capabilities, attackers can execute more sophisticated attacks. This makes the continuous updating and improvement of security measures essential.

Legal Frameworks and Regulations
Establishing legal regulations regarding the use of AI technologies is necessary to ensure that these technologies are employed in a safe and ethical manner. Regulations play a crucial role in preventing the misuse of artificial intelligence and ensuring user safety.

Ransomware Attacks and Remote Work
In the post-pandemic era, vulnerabilities related to remote work and remote access security have led to an increase in ransomware attacks. Threat actors can exploit these vulnerabilities to cause significant harm to companies. Therefore, it is essential to develop a unified stance against ransomware attacks and to combat them with the support of governments.