Build a Bot Strategy Before Cybercriminals Exploit the Gap | Steve Winterfeld, Akamai

The video highlights critical insights for the retail and hospitality sectors, emphasizing that loyalty points have effectively become a new form of shadow currency. Steve Winterfeld notes that cybercriminals are increasingly targeting these programs, making it essential for companies with loyalty schemes to treat them with the same level of security as credit card data or other sensitive financial information. This shift in threat landscape requires organizations to fundamentally change their attitudes and defensive strategies if they have not already done so, ensuring that valuable customer rewards are protected from emerging digital attacks. A significant challenge currently facing retailers is the tendency to view all bots through a negative lens, leading to reactive rather than strategic management of bot traffic. Many organizations still rely on a binary approach where any detected bot is immediately blocked without distinguishing between malicious actors and beneficial entities. The transcript explains that there are various types of bots in circulation, including training bots that use server resources for AI development, fetcher bots that help customers purchase items like shoes, and malicious bots designed to harm the business. This lack of differentiation causes companies to fall into the trap of blocking legitimate traffic while failing to effectively mitigate genuine threats. To address these complexities, the speaker argues that having mere bot detection tools is insufficient without a comprehensive bot strategy. Effective management requires moving beyond simple yes-or-no decisions about whether traffic is human and instead evaluating the intent and value of the bot activity. Organizations must determine if a bot is part of a synthetic customer experience, assisting in desired transactions, or if it is training on their site in a way that wastes resources and should be minimized. This nuanced approach demands a deeper understanding of the different roles bots play within an ecosystem rather than applying a one-size-fits-all blocking mechanism. Ultimately, the conclusion drawn is that developing a robust bot strategy must be a collaborative effort between the Chief Information Officer and the Chief Information Security Officer. As the volume and sophistication of bot traffic continue to grow, it becomes increasingly important for these leaders to work jointly to create a unified strategy that balances security with business functionality. By aligning their efforts, CIOs and CISOs can ensure that legitimate customer experiences are preserved while effectively neutralizing malicious threats, thereby closing the gap before cybercriminals can exploit vulnerabilities in loyalty programs and other critical digital assets.