Jamf Practitioner Outlines Ongoing Cybersecurity Practices for Organizations

Summary

Jamf’s practitioner perspective recommends continuous employee training, threat hunting, AI governance, vulnerability testing and monitoring to address phishing, AI-agent risks and other ongoing threats.

Key points

• The article warns that AI can make phishing more personalized and convincing, including through deepfake-assisted calls or videos.
• It says highly privileged AI agents can make attacks resemble legitimate use, while errors or misconfigurations can cause data loss or system damage; it cites an AI coding agent deleting a production database.
• Jamf describes ongoing phishing simulations, employee recognition for reporting suspicious messages, and security education throughout the year.
• Its described security practices include pre-release vulnerability scans and penetration tests, annual third-party penetration testing, continuous scanning and monitoring, and annual disaster-recovery testing.
• The article recommends threat hunting and governing employees’ use of AI tools to reduce risks such as code or sensitive-data exposure.
• Jamf presents its security program and services alongside these recommendations, including its threat-hunting offering.

Vendors

Products