Sophos CISO Ross McKerchar on AI Threats, Burnout and Industry Trust
Summary
Sophos CISO Ross McKerchar discusses AI’s current and potential cyber risks, cybersecurity team burnout, the Pacific Rim project, and a growing trust problem in the security industry.
Key points
- McKerchar says AI is increasing phishing volume, but the phishing quality he has seen is not yet comparable to that of sophisticated attackers.
- He is concerned that AI could lower the cost of finding zero-days, potentially making them more attractive against smaller firms with proprietary software.
- He says security teams need experienced staff and that retaining and supporting existing team members are major leadership challenges.
- To prevent burnout, he recommends reducing sustained workload, allowing time for engaging projects, and using shift rotations and handovers during major incidents.
- McKerchar says Sophos monitored attackers targeting its firewalls and placed a kernel implant on a compromised device they used to develop exploits; he says the company sought legal counsel and liaised with the NSA and UK NCSC.
- He identifies trust as a growing industry-wide concern, saying security products have themselves been involved in breaches.
Article Details
- Topic
- Ross McKerchar's perspectives on CISO leadership, cybersecurity workforce challenges, burnout, AI, and Sophos's Pacific Rim defensive operation