The rapid advancement and evolution of technology have brought many benefits to society, but have also ushered in more complex cybersecurity threats. Apart from the rapid rise of Artificial Intelligence (AI) technology and the risks it brought in 2023, many authoritative organizations, experts, and scholars have also made other predictions for data security trends in 2024. 

Firstly, generative AI will continue to pose more cybersecurity risks due to malicious use by hackers. As the applications of generative AI expand, hackers may infiltrate model data storage or process architectures by feeding the machine incorrect data, leading to the leakage of confidential information from natural language processing or the contamination of systems rendering them dysfunctional. This scenario is referred to as "Model Poisoning." Additionally, generative AI enhances capabilities for fraud, such as variant scams and phishing. In the future, hackers may combine different AI tools to conduct ransom activities in more realistic ways. 

Secondly, supply chain attacks are expected to increase, with one attack method called chained supply chain attacks becoming one of the hackers' primary means. In this attack, hackers first gain access to one system, then use that access to breach other interconnected systems. This attack method can effectively bypass strong defenses, exploiting vulnerabilities in interconnected, trusted but relatively vulnerable targets to penetrate higher secured systems. 

Moreover, the proliferation of generative AI will also make cloud networking a new target for attacks. Due to the skyrocketing costs of running these models, reaching even millions of dollars. Therefore, hackers are beginning to target the cloud, establishing computational farms to raise funds to support their operations. Unlike a few years ago when cryptocurrency mining was the main target, cloud computational farms may become the focus of attacks in the future. Additionally, according to predictions, large-scale native cloud worm attacks may also emerge, where hackers can use infected cloud technologies as a springboard to spread infections elsewhere. Cloud-native worms can infect multiple containers at once and exploit vulnerabilities for large-scale attacks, achieving reconnaissance, attack, and residency, all fully automated.

Finally, private blockchains will also become targets for hackers. Unlike public blockchains, private blockchains adopt a centralized design and are not regularly strengthened in attacks. In the future, hackers may develop new ransom-based business models targeting these blockchains. In these ransom actions, hackers may deliberately insert malicious data or tamper with existing transaction records on the blockchain using stolen keys, then ransom the victims for ransom as a hush fee.

In conclusion, the data security environment in 2024 continues to face various threats and challenges. We need to pay attention to the application of AI technology and the corresponding risks, strengthen protection of cloud environments, and popularize multi-factor authentication mechanisms. Educating users to raise awareness against phishing and ransomware attacks is also crucial. Meanwhile, the application of blockchain technology can provide more secure verification methods. Enterprises need to invest in talent training and establish a good data security culture. We should also raise awareness of data security and continue to monitor technological developments and corresponding risks to ensure the security of our digital life.

Jacky Wan

Ringus Solution Enterprise Limited

A：Units 1817-1820, Tower 1, Grand Century Place, 193 Prince Edward Rd W, Mong Kok, Hong Kong

E：info@ringus-solution.com

T：(852) 2907 6011

W：www.ringus-solution.com