{"id":236700,"date":"2026-06-24T19:11:00","date_gmt":"2026-06-24T23:11:00","guid":{"rendered":"https:\/\/testing.news-you-need.com\/index.php\/2026\/06\/24\/even-in-the-ai-era-basic-cyber-hygiene-is-still-key\/"},"modified":"2026-06-24T19:15:15","modified_gmt":"2026-06-24T23:15:15","slug":"even-in-the-ai-era-basic-cyber-hygiene-is-still-key","status":"publish","type":"post","link":"https:\/\/testing.news-you-need.com\/index.php\/2026\/06\/24\/even-in-the-ai-era-basic-cyber-hygiene-is-still-key\/","title":{"rendered":"Even in the AI Era, Basic Cyber Hygiene Is Still Key"},"content":{"rendered":"

Even in the AI Era, Basic Cyber Hygiene Is Still Key<\/a><\/p>\n

https:\/\/www.govtech.com\/security\/even-in-the-ai-era-basic-cyber-hygiene-is-still-key<\/a><\/p>\n

Publish Date: 2026-06-24 19:11:00<\/a><\/p>\n

Source Domain: www.govtech.com<\/a><\/p>\n

Author: <\/a><\/p>\n

Using an unordered list, summarize the following article with between 4 and 8 key points. <\/p>\n

ORLANDO, Fla. \u2014 Even as AI is significantly changing the cybersecurity landscape, experts still recommend foundational, traditional cyber controls.In this week\u2019s ISAC Annual Summit,* an ongoing conversation thread emerged about how cybersecurity defenders could fend off criminals. During panels and Q&A segments, attendees raised the same concern: What can we do to keep our systems safe?State, local, tribal and territorial (SLTT) cyber practitioners are looking for concrete ways to lock down systems as criminals armed with publicly available AI platforms move at faster speeds, attack at higher volumes and scan the Internet for clues to who is most vulnerable. Participants examined cybersecurity measures such as identity management and email security processes, and deepfakes and business email compromise.In Tuesday\u2019s \u201cJoint Threat Brief: Center for Internet Security and Center for Digital Government,\u201d CIS analysts walked through current cybersecurity concerns ranging from international cyber threats to AI\u2019s effects on cybersecurity. Randy Rose, vice president of security operations and intelligence at CIS, reminded those present to commit to basic cyber hygiene, pointing to CIS Critical Security Controls.\u201cWe have found that getting the basics right \u2014 when I say the basics, I don\u2019t mean to imply that they\u2019re easy or simple because they\u2019re not,\u201d Rose said. \u201cBut they\u2019re the essential things that we have to get right from a layered defense model. They mitigate an incredible number of attacks, even the more advanced attacks that we see.\u201dInventory control is at the top of the CIS security controls list. No. 1 within that is hardware assets and No. 2 is software assets. The work isn\u2019t exciting, panelists agreed, but it will address multiple issues including supply chain management and endpoint management. When IT shops know what is in their environment, not only does that mean more complete security but also a baseline from which to add more systems and software.Cyber attacks are getting faster, looking more realistic, and coming through unexpected channels, Minnesota Chief Information Security Officer (CISO) John Israel said during another session, \u201cSecuring the Frontlines: How Attackers Weaponize AI Against SLTT Governments.\u201dMany cyber threats are identity related, the state CISO said, so a focus in his state is looking at those, asking questions and applying tools to strengthen identity and access. Requiring phishing-resistant multifactor authentication, additional validation, and having a human double check whether behavior is malicious or not are essential. His advice connected in multiple concerns including deepfake emails, voice calls and video calls.Israel alluded to past technological disruptions, highlighting opportunities and concerns therein.\u201cComing in from a government perspective and looking out at a room of IT and cyber professionals, it\u2019s not like we\u2019ve never addressed a new technology or new challenge \u2026 I see this as really no different,\u201d he said, indicating that from a government perspective, there are a lot of opportunities here. \u201cWe\u2019ve got to look at the risk [AI] brings into our partnerships, but also the opportunity we have to really enhance the way we\u2019re building programs and meeting our residents \u2026 enhancing the ability to support them more intelligently, more actively, and in real time.\u201dConcern is rising about deepfakes, which can impersonate an executive, vendor or someone else linked to the business. These frequently ask a government worker \u2014 for instance, a procurement officer \u2014 to transfer large sums of money as quickly as possible.Asking questions and slowing down before responding are helpful tools in avoiding these scams, Israel said, suggesting when there is doubt, employees should feel empowered to double check with the person in the \u201cTo:\u201d line or to check in on the chain of command for authorizing payments.\u201cWe can lean heavily into \u2026 process, and at the state level, we\u2019ve seen success because we\u2019ve got so much process around releasing data, money and bank payments,\u201d he said. \u201cHow do you educate people to really scrutinize something coming in, and if it\u2019s really urgent? If it\u2019s asking for something significant, like moving money or data really fast, you\u2019ve got to take that offline.\u201dThe exploits haven\u2019t changed, Hector \u201cSabu\u201d Monsegur, black-hat hacker turned white-hat, told attendees \u2014 but the adversary has. Instead of a highly technical hacker who understands computing\u2019s inner workings, the AI-enabled hacker is technically inexperienced, often a teenager, and is seeking easy targets, Monsegur said during the Tuesday keynote, \u201cHow to Work Better Together \u2014 Through Collaboration in Tech, Security and AI.\u201d\u201cWe\u2019re talking about \u2026 adversaries and bots and unsophisticated actors looking for low-hanging fruit,\u201d Monsegur said. \u201cSo, if you at least cover the fundamentals \u2026 they\u2019re probably going to pass you by.\u201d He did note that if someone is looking for intellectual property, or to make political waves, they are more likely to work harder toward a breach.As to identity, Monsegur recommended that team members assess Active Directory environments, which can be done with freely available tools.\u201cIt\u2019s going to take about an hour\u2019s worth of work, so if you get paid $50 an hour, you just cost the company 50 bucks, but \u2026 you just saved millions of dollars in potential future damages,\u201d he said. \u201cFrom a national security level, each and every one of you in here, you play a role \u2026 in national security,\u201d Monsegur said. \u201cFrom the smallest of counties to the biggest of cities, all the way up to the federal government. This is why MS-ISAC and some organizations are very important. You have to keep these alive, make sure you get funding \u2026 because these organizations tend to help those smaller communities and counties that don\u2019t have the resources to invest in cyber.\u201d*The ISAC Annual Summit 2026 is an event produced in partnership between the Multi-State Information Sharing and Analysis Center and e.Republic,\u00a0Government Technology\u2019s parent company.<\/p>\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

Even in the AI Era, Basic Cyber Hygiene Is Still Key https:\/\/www.govtech.com\/security\/even-in-the-ai-era-basic-cyber-hygiene-is-still-key Publish Date: 2026-06-24…<\/p>\n","protected":false},"author":1,"featured_media":236701,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/erepublic.brightspotcdn.com\/dims4\/default\/26ff0a5\/2147483647\/strip\/true\/crop\/4032x1960+0+902\/resize\/1440x700!\/quality\/90\/?url=http%3A%2F%2Ferepublic-brightspot.s3.us-west-2.amazonaws.com%2F39%2Fde%2Fe3b2223e49eaa896a846d218c8c8%2Fisac-annual-summit-2026-threat-briefing.jpg","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[26,30,24,35,25],"class_list":["post-236700","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-ai","tag-breach","tag-cybersecurity","tag-hacker","tag-phishing"],"_links":{"self":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/236700"}],"collection":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=236700"}],"version-history":[{"count":1,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/236700\/revisions"}],"predecessor-version":[{"id":236702,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/236700\/revisions\/236702"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/236701"}],"wp:attachment":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=236700"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=236700"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=236700"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}