We can’t fight AI with AI
The biggest cybersecurity threat facing people and enterprises today isn’t AI, but social engineering and other forms of identity-based attacks. Artificial intelligence, with its ability to automate attacks and enable deep fake impersonations, is going to accelerate the threat that these threat vectors pose by substantially lowering the cost and effort it takes to launch them. The primary issue with introducing AI agents into workloads is that it can create a situation where you’re leaking data, and you now need to find out: 1) what data the AI agent was trained on, 2) what data the AI agent had access to, and 3) which employees had access to the AI agent. The best next step enterprises can take to shield themselves from AI-led social engineering attacks is to make sure the identities for employees are never presented as digital information. The goal should always be to materially reduce the attack surface that threat actors can target with social engineering strategies. You therefore have to secure identities cryptographically, basing them on physical world attributes that cannot be stolen, like biometric authentication, and enforcing access based on ephemeral privileges that are granted only for the period of time that work needs to be completed.
#Ai #Cybersecurity #SocialEngineering #IdentitybasedAttacks
7/17/2024, 1 engagement