EDITOR ’ S question ost organisations have adopted
M some form of Generative AI , chatbot or Machine Learning-based tool into their environment this year , or plan to in the near future . While Generative AI promises to streamline work and improve efficiency in 2024 , it will also present new challenges for IT and security teams .
Putting the ‘ breaks ’ on the AI race
Firstly , the old Silicon Valley adage ‘ move fast and break things ’ is all too relevant when it comes to AI adoption this year . Over 1-in-4 US dollars of start-up investment funding has gone to AI-related ventures in the US , while the UK is leading AI investment streams in Europe . The trend is unlikely to slow down , as EY reports 74 % of UK CEOs are set to ramp up GenAI applications to avoid being left behind by competitors . However , the AI surge has serious implications if security is not embedded at the first opportunity .
The biggest concern when it comes to AI implementation is vulnerable code . 2024 will see cybersecurity AI budgets swell as teams learn more about the technology ’ s defence benefits and their own AI code ’ s vulnerabilities . With AI-powered coding tools often trained on public sources of code , security is an afterthought at best . Savvy companies should be focusing on patching up endpoints generated by these open-source products . They should also be conducting thorough reviews and testing while implementing clear company directives on how to use AI safely before AI models are upgraded or added to the network .
Keeping up with AI-powered RaaS
As AI security plans develop , firms will also need to prepare themselves to combat new AI-powered attacks , particularly ones based around the Ransomware-as-a-Service ( RaaS ) model . 2023 saw RaaS explode in popularity , with ransomware incidents increasing by 46 % during the first half of 2023 , compared to the second half of 2022 .
The RaaS business model has enabled threat actors to monetise intrusions and scale their businesses with specialised services , charging premiums to bypass specific security controls . There ’ s no reason to think this won ’ t continue – and expand – into 2024 with the help of new or improved AI tools . To mitigate the impact of a breach , leaders must understand what normal network flow and user behaviour looks like , making it easier to identify anomalies which could indicate potential intrusions .
2024 security resolutions
AI is set to revolutionise how both defenders and attackers work next year . However , it is crucial organisations don ’ t fall into the trap of prioritising speed over precision in their AI adoption , as this approach will result in more risks than benefits and the blame will fall squarely on executives ’ shoulders . Instead , fully assess where AI can add value , and be aware of what sensitive information it could access . This will mean companies can reap the advantages of this powerful technology , while protecting themselves from any potential accidents .
It is crucial organisations don ’ t fall into the trap of prioritising speed over precision in their AI adoption .
DAN SCHIAPPA , CHIEF PRODUCT OFFICER , ARCTIC WOLF
WWW . INTELLIGENTCISO . COM 29