As we have entered a new year, I will make three quick predictions for the cyber-/information-security landscape in 2024.

Generative AI with large language models will continue to make it more difficult for employees to protect the organization and themselves from fraud attempts. The classical “red flags” for a phishing email will be significantly reduced, and the volume of “well-crafted” phishing attempts will continue to increase.

The cyber and information security field will continue to be led by technologists. This will lead to a continued lack of focus on the human element and the untapped potential of well-trained employees. From history, we know that technology and humans will occasionally fail, and we need to build more robust defenses where we utilize both humans and technology as one.