FEATURE : CYBERSECURITY
THE ONLY WAY FOR ORGANIZATIONS TO STEP INTO THE WORLD OF GENERATIVE AI SAFELY AND SECURELY IS WITH A SOLID FOUNDATION OF AI GOVERNANCE .
more convincing phishing emails that have a higher potential to fool business users and potentially leave organizations vulnerable to outside exploits .
Generative AI tools are also helping threat actors develop and refine code to assist with ransomware , malware and other related attacks . While most generative AI models are designed to keep users from generating malicious code , the tools are not yet sophisticated enough to block all the prompts that may be used by cybercriminals .
Because generative AI tools are constantly learning from the information that they are fed , there is a risk that cybercriminals may also begin to corrupt AI models . By manipulating data fed into Generative AI models , threat actors could tamper with it to the point where it begins to produce incorrect outputs , biased results and other undesirable or unreliable outcomes .
The new cyber craze
There is a considerable opportunity for generative AI as an assistive form of technology , augmenting and assisting in the complex role of the security analyst rather than eliminating it and helping analysts build efficiencies in many key areas of their work .
Generative AI also offers exciting possibilities to help communicate complex security concepts to influential stakeholders , like company executives and board members , that may not speak the language of cybersecurity in the same way that analysts do .
There is no denying that generative AI has massive potential to be used for good in the industry . However , as is often the case in cybersecurity , too many vendors are overhyping its current capabilities .
Before the advent of generative AI , the industry was fixated on extended detection and response ( XDR ), and much earlier than that , there was an obsession with Big Data . Unfortunately , the industry too often grows attached to whichever latest and greatest technology is claiming the headlines that year .
Practitioners should not be focused on chasing down a panacea . It must be accepted that there is no “ easy
54 INTELLIGENTCIO APAC www . intelligentcio . com