Tony Fergusson
As seen in:
MSN,
MSN UK,
The Independent (UK),
TechRadar,
ComputerWeekly.de,
Dark Reading,
SDxCentral,
Business Reporter,
Techzine,
Be a Boss
and
Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Tony Fergusson
Fostering trust in the age of misinformation, disinformation, and malinformation
The reality for many organizations is that their employees are already being deceived. So, probably are their customers, their investors, and their board. For years, the warnings have focused on the impact of deepfakes, such as fake CEOs on video calls, cloned voices authorizing payments, and fraudulent emails. The tactics themselves are not new, but over the past few years, AI has made them cheaper to produce, harder to spot, and far more convincing within the ordinary flow of business.
Fostering trust in the age of misinformation, disinformation, and malinformation
; ; ; ; Continue reading More for You
Quando la fiducia è meno netta: ripensare il rischio legato alle terze parti per rafforzare la resilienza aziendale
Il tradizionale perimetro di sicurezza non esiste più. Oggi le aziende operano all’interno di ecosistemi complessi e distribuiti, che includono fornitori, piattaforme SaaS, collaboratori esterni e partner. Questa interdipendenza sta diventando una delle principali minacce per la resilienza aziendale.
The Blurring Lines of Trust: Rethinking Third-Party Risk for Organisational Resilience
The traditional security perimeter no longer exists. Today’s enterprises operate within sprawling ecosystems of suppliers, SaaS platforms, contractors, and outsourced partners — and that interdependence is becoming one of the greatest threats to organisational resilience.
Prompt Hacking: Die Büchse der Pandora für die Sicherheit
Prompt Hacking ist eine ernstzunehmende Bedrohung für die Cybersicherheit, ähnlich wie SQL-Injection-Angriffe aus den frühen 2000er Jahren. Damals ermöglichten es SQL-Injektionen, auf einfache Weise schädlichen Code in Website-Formulare einzufügen, um wichtige Informationen aus den Datenbanken eines Unternehmens zu stehlen oder zu verändern. Solche Angriffe waren weit verbreitet und zeigten die Gefahr auf, wenn Unternehmen nicht sorgfältig überprüfen, was User in ihre Systeme eingeben.
Manipolazione dei prompt: la bassa soglia di accesso apre il vaso di Pandora
L’integrazione rapida dell’intelligenza artificiale nelle operazioni aziendali ha rivoluzionato l’efficienza, aprendo nuove opportunità per ottimizzare i flussi di lavoro e migliorare i processi decisionali. Tuttavia, l’adozione di questi potenti strumenti comporta anche dei rischi. Una delle minacce emergenti è il prompt hacking o prompt injection: la manipolazione degli input in linguaggio naturale utilizzata dai criminali per indurre i modelli a generare output dannosi.
Warum jede Cyberbedrohung ein Insider-Angriff ist
Die Evolution von Insider-Risiken: Warum heute jede Cyberbedrohung ein Insider-Angriff ist. Das Risiko von Insider-Risiken begleitet Unternehmen seit jeher – doch seine Bedeutung hat sich gewandelt. Per Definition verstand man unter einem Insider jemanden, der sich physisch im Unternehmen aufhielt: Mitarbeitende im Büro oder externe Fachkräfte, die vor Ort im Einsatz waren. Diese Ansicht hat sich mit dem Aufkommen der Cloud gewandelt.
Prompt hacking: een nieuwe dreiging voor AI-systemen
De adoptie van kunstmatige intelligentie (AI) heeft de manier waarop bedrijven werken voor altijd veranderd door processen te stroomlijnen en besluitvorming te verbeteren. Naarmate AI-systemen echter dieper worden geïntegreerd in dagelijkse bedrijfsfuncties, introduceren ze ook nieuwe kwetsbaarheden en beveiligingsrisico’s. Een van de belangrijkste opkomende dreigingen is prompt hacking. Wat is prompt hacking? Prompt hacking is vergelijkbaar met de SQL-injectieaanvallen van de begin jaren 2000.
KI-Prompt Manipulation öffnet die Büchse der Pandora
KI-Prompt Manipulation öffnet die Büchse der Pandora. KI wird für Unternehmen immer wichtiger: Sie hilft dabei, die Effizienz von Geschäftsabläufen zu steigern, Arbeitsabläufe zu rationalisieren und Entscheidungsprozesse zu beschleunigen. Doch wo Licht ist, ist auch Schatten: In den falschen Händen können diese Tools zu erheblichen Risiken führen, wie der neueste Trend von Cyber-Kriminellen zeigt: Das sogenannte Prompt Hacking.
Prompt manipulation: Pandora’s Box has been opened
The rapid integration of AI into business operations has revolutionized efficiency, unlocking opportunities to streamline workflows and improve decision-making. However, the adoption of these powerful tools comes with risks and Cybersecurity Awareness Month reminds us that vigilance and strong defenses are key to navigating the evolving security landscape of risks going along with AI.
KI-Prompts: Manipulation öffnet die Büchse der Pandora
Cybersecurity Awarenes KI-Prompts: Manipulation öffnet die Büchse der Pandora 29.10.2025 Ein Gastbeitrag von Tony Fergusson 3 min Lesedauer Anbieter zum Thema Die Integration von künstlicher Intelligenz in Unternehmen hat zum Ziel, die Effizienz von Geschäftsabläufen zu verbessern, Arbeitsabläufe zu rationalisieren und Entscheidungsprozesse zu beschleunigen. Allerdings birgt die Nutzung dieser Tools auch Risiken, wie die Manipulation von KI-Prompts.
Authentifizierung: Die passwortlose und sichere Zukunft naht
Passwort-Management Anbieter zum Thema Der World Password Day wird in nicht allzu ferner Zukunft ausgedient haben, wenn man die jüngsten Entwicklungen bei der Authentifizierung verfolgt. Es zeichnet sich schon heute der Trend ab, anstelle komplexer Passwörter längere und einprägsamere Varianten zu verwenden. Der Mensch neigt bei der Erstellung seiner Passwörter dazu, vorhersehbaren Mustern zu folgen, wie beispielsweise die Platzierung von Großbuchstaben am Anfang oder Sonderzeichen am Ende.
Zero Trust Simplicity | Complexity Resolved | CSA
Originally published by CXO REvolutionaries. Written by Tony Fergusson, CISO in Residence, Zscaler. Zero trust architecture isn't rocket science. But, as in rocket science, stripping away unnecessary functions and streamlining existing ones is a step in the direction of simpler, more elegant solutions. “Any intelligent fool can make things bigger and more complex.
Aziende, diventare competitive accettando la trasformazione digitale
Tony Fergusson, CISO EMEA, Zscaler lancia un avvertimento alle aziende: se vogliono rimanere competitive devono liberarsi dell’inerzia e accettare la trasformazione digitale. Le aziende di oggi devono far fronte a pressioni sempre maggiori per adattarsi ed evolversi in linea con la velocità del cambiamento tecnologico. Per rimanere competitive, le aziende sono incoraggiate a modernizzare i sistemi legacy, a migrare verso il cloud e a adottare nuove architetture di sicurezza come Zero Trust.
Ottenere la conformità NIS 2 in ambienti OT: Zero Trust e la segmentazione della rete
I professionisti della sicurezza informatica si trovano oggi ad affrontare una sfida unica quando si tratta di sicurezza degli ambienti OT (Operation Technology). Perché? Perché in questi ambienti, non si tratta solo di proteggere i dati ma anche di mantenere l’integrità della produzione. Questo è il risultato della rapida crescita di Industria 4.0, che sta rivoluzionando i processi produttivi in molti settori.
Risk Hunting: l’efficacia di un approccio proattivo nella cybersecurity
L’attuale panorama delle minacce è più vasto che mai e la velocità con cui un criminale informatico può sfruttare le lacune di un sistema di sicurezza è sempre maggiore. A fronte di questa pericolosa combinazione, le aziende riconoscono sempre più spesso i limiti dei loro tradizionali approcci reattivi alla sicurezza informatica, come per esempio la metodologia del “threat hunting” ovvero dell’andare a caccia delle minacce.
Unveiling the Dark Arts of Exploiting Trust
Originally published by CXO REvolutionaries. Written by Tony Fergusson, CISO in Residence, Zscaler. Trust is a fundamental aspect of human interaction, forming the foundation of relationships and societal harmony. However, trust can be deceptive, concealing hidden vulnerabilities that emerge when we let our guard down. This leaves us exposed to unforeseen risks and challenges. There was a time when internet security was essentially synonymous with URL filtering. This recognized site = allow.
Who Owns Information in the Era of AI?
Originally published by CXO REvolutionaries. Written by Tony Fergusson, CISO in Residence and Sam Curry, VP & CISO in Residence, Zscaler. Mark Twain, the distinguished American author, once wrote, “The kernel, the soul, let us go further and say the substance, the bulk, the actual and valuable material of all human utterances is plagiarism.” This statement appeared in a letter written to Helen Keller in 1903, as the twelve-year-old girl was accused of copying another author’s work.
Partis " pêcher " : pourquoi " les tracanciers " doivent-ils rester vigilants cet été ?
Un seul mot : le phishing. Aujourd'hui, les types d'attaques pour lesquels il faut doubler de vigilance sont nombreux.
Gone phishing: why workationers can’t afford to let their defences down this summer
A stream of out-of-office messages signal that summer is upon us. And even those unable to log off completely are taking advantage of the rising trend for “workations” – heading off to a holiday spot to work in a more relaxing environment for a while. This flexible take on WFH has given rise to a new acronym: WFB. “Working from the beach” allowances are an attractive staff-retention benefit in an increasingly competitive jobseekers’ market.
A Fool With a Tool is Still a Fool: A Cyber Take
Originally published by CXO REvolutionaries and Dark Reading. Written by Tony Fergusson, CISO - EMEA, Zscaler. New tech often requires new thinking — but that's harder to install Here's a provocative question: Is it possible, given the vast array of security threats today, to have too many security tools? The answer is: You bet it's possible, if the tools aren't used the way they could be and should be. And all too often, they aren't. New tools introduce new possibilities.
Why Your SOC Won’t Save You
Originally published by CXO REvolutionaries. Written by Tony Fergusson, CISO - EMEA, Zscaler. Are SOCs just the emperor’s new clothes? It’s sometimes suggested in this industry that a security operations center (SOC) is a sign of superior cybersecurity and business success. But is that really wisdom? Or is it a false assumption getting more and more false every year? See if this story sounds familiar: A company makes a splash, swiftly grows its market and user base, and posts a few good quarters.
A Fool With a Tool Is Still a Fool: A Cyber Take
Partner Perspectives New tech often requires new thinking — but that's harder to install. Here's a provocative question: Is it possible, given the vast array of security threats today, to have too many security tools? The answer is: You bet it's possible, if the tools aren't used the way they could be and should be. And all too often, they aren't. New tools introduce new possibilities.
Meer focus nodig op preventieve IT-beveiliging
Tegenwoordig besteden bedrijven erg veel geld aan reactieve cybersecurity-maatregelen. Ze vertrouwen op technologieën die aanvallen binnen de infrastructuur detecteren en daarop reageren. En investeren daarnaast in cyberverzekeringen en bitcoins voor ransomware-claims. Maar zou het voorkomen van veiligheidsincidenten niet eigenlijk prioriteit moeten hebben? Onderstaand negenpuntenplan voor meer proactieve beveiliging laat zien hoe bedrijven hun beveiliging kunnen versterken.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Tony
Contact Tony, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack