Cybersecurity: Stepping up with AI

Author: Savita Tambwekar

We know how cybersecurity is important to an organization for not just business continuity and resilience but in winning the trust of its customers and shareholders. With the cyber world growing exponentially, cybercrimes are growing too. Now with artificial intelligence (AI), the already sophisticated cybercrimes have become `intelligent’.

Smartphones and the Internet of Things have just made cyber threats ubiquitous.

According to IBM, the average cost of data breaches in 2022 was $4.35 million globally.

Though businesses have been using automation and AI for cybersecurity for a while now, it just needs to get better. Simply because cyber criminals are using it too!! Cybersecurity experts must stay a few steps ahead of cyber criminals, such as black hat hackers, crackers, and threat actors.

With cloud adoption, lines are not just blurring between hardware and software but a new layer has emerged for cyberattacks – where traditional cybersecurity solutions are insufficient.

An AI-based cybersecurity strategy is essential to combat modern threats. AI can be applied in cybersecurity for threat detection. Machine learning algorithms can analyze vast amounts of data to identify potential threats and anomalies and detect even sophisticated attacks.

Beating the Enemy
IT solutions companies are upping their game too, using AI and machine learning algorithms to identify vulnerabilities, detect and prevent cyber threats in real-time, and provide real-time threat intelligence and analytics.

Accenture is focusing on AI-driven solutions to secure cloud environments, addressing the unique challenges associated with cloud-based architectures.

Palo Alto Networks provides advanced services in protecting ‘all things digital’ across clouds, mobile devices and networks, and cloud and enterprise solutions. McAfee provides online protection services, such as identity monitoring, virus removal, and securing VPNs. Trellix provides hardware, software, and advanced cyber threat intelligence.

TATA Communications provides solutions for safeguarding cloud workloads, networks, endpoints and emails from ransomware, advanced persistent threats, insider threats, and other malwares. CISCO and IBM Watson and others are using AI like never before.

Needless to say, AI is the future of cybersecurity.

Generative AI Threats
AI may be the new gold rush but organizations need to tread cautiously. Generative AI is a game changer also in terms of the new risks it brings in cyber security. As companies jump on to the AI bandwagon, they may also be getting vulnerable to data poisoning and attacks from AI models and apps themselves.

AI models can be fed malicious inputs that can further be developed to execute malware – or slip in ransomware. Hackers can hide code in the model, sabotage it, and steal confidential data.

FraudGPT and WormGPT (similar to the controversial ChaosGPT) are malicious chatbots found recently on the dark web. These too are using AI to generate text and code. FraudGPT is believed to be able to write malicious code, create phishing emails, crack passwords, and commit credit card fraud.

Therefore, cybersecurity and risk professionals need a deep understanding of generative AI technologies, their inherent security risks, and the strategies needed to manage these risks effectively.

What Organizations Can Do
Organizations need to secure their AI systems. Employ only reliable services to develop these. Assess the risk of data breaches and identity theft involved, especially data leaks that may expose confidential corporate information. Check malicious use of deep fakes. Importantly, train employees on safe and proper use of AI tools.

So begin by researching the company developing the AI models and apps. Employ trustworthy and competent services for cybersecurity.

Companies can get proactive with threat intelligence and assess their governance, risk and compliance (GRC) preparedness to reduce their security risks. Cybersecurity specialists, such as ethical hackers, threat intelligence, GRC, and vulnerable assessments specialists, and network security managers need to step up their game. They need to stay up-to-date with certifications, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), and Certified Ethical Hacker (CEH) to name a few.

We at ewandzdigital provide a well-chartered, AI-based approach to managing cybersecurity for our customers data, employees, and processes. We understand the cyber threats organizations face today. With SecurityHQ, we can provide customized solutions to our customers. We help monitor endpoints and secure network systems. We cover digital risks even in the public domain, including industry-specific threats to avert data breaches. With our Phishing Attack Simulation services, employees can work stress-free.