AI reshapes business cybersecurity landscape, warns Experian

Emerging technologies, particularly artificial intelligence (AI), are rapidly reshaping the landscape of business practices, as highlighted in Experian’s annual breach forecast. The information services company emphasises the growing significance of AI in relation to cyber incidents, portraying a clear shift in the cybersecurity paradigm.

Michael Bruemmer, vice president of global data breach resolution at Experian, noted that the cyber threats anticipated for 2024, including ransomware attacks and breaches affecting supply chains, will be overshadowed by AI-related incidents by 2025. Speaking to the Insurance Journal, Bruemmer remarked that businesses are actively embracing AI technology, yet there remains a critical gap in understanding its implications within the C-suite. He revealed that AI has factored into three-quarters of recorded hacks, prompting Experian to include AI in four of the five predictions for its Data Breach Industry Forecast.

As organisations increasingly deploy AI, data centres have emerged as prime targets for cyber attackers, particularly given the immense computational power required for generative AI applications. Bruemmer indicated that tools like ChatGPT necessitate ten times the amount of electricity compared to a standard Google search, thus creating a new vulnerability for hackers. This situation highlights the potential for future threats against a nation’s cloud infrastructure, wherein attackers may seek to exploit these power requirements.

The trend is not solely influenced by established professionals in the industry; younger individuals are also becoming increasingly involved in cyber activities. Bruemmer pointed out that AI-literate teenagers and young adults are entering the cyberspace, often through platforms such as online gaming and social media. He underscored the seriousness of this trend by stating, “Don’t underestimate the seriousness of this,” noting that the average age of individuals arrested for cybercrime is just 19 years.

Additionally, the traditional role of employees in cybersecurity is being re-evaluated. With the expansion of AI utilisation, educated employees could inadvertently or intentionally become sources of insider threats, leveraging their newfound knowledge for fraudulent activities or disruptions.

AI-driven fraud presents unique challenges that undermine previously effective security measures such as encryption. According to Experian, the evolving capabilities of AI are rendering certain protective strategies obsolete. The forecast warns that cybercriminals may soon gain the ability to fabricate undetectable proof-of-life documents. To counteract these advancements, Bruemmer advocates for government agencies to transition towards dynamic identification systems, which could replace conventional forms of identification like drivers’ licenses and social security cards.

Interestingly, Experian also anticipates a possible increase in “hacker-on-hacker” attacks, with blurred lines between perpetrator and victim in the digital realm. This evolving landscape reflects the complexities introduced by AI and other emerging technologies, underscoring the necessity for businesses to navigate a dual focus on innovation while also fortifying their cybersecurity practices against a backdrop of evolving threats.

Source: Noah Wire Services