The AI/Cyber Debate Is Missing the Point: What Every Business Leader Needs to Know Right Now

?

The infusion of AI into cybersecurity is a double-edged sword. On the one hand, this incredible technology has the potential to dramatically revolutionize cybersecurity capabilities, shoring up security posture while alleviating the burden on IT and security teams. On the other hand, AI is also a really handy tool for threat actors.??

This tension has generated a hot debate in the cybersecurity world. Is AI friend or foe? Must-have advantage or dangerous security risk? Countless digital ink has been spilled on the topic, with fierce opinions on both sides. Fully 95% of IT and security professionals believe that cybersecurity will become more dangerous as a direct result of AI, according to recent research by Ivanti .?

Here’s the problem: if you’re picking sides in the AI/cybersecurity debate, you’re missing the point.?

For context, I’ve been fortunate to be at the forefront of the intersection of AI and cybersecurity for literal decades. (Yes, they’ve both been around that long!)?

Of course, it is only in the last couple of years that the AI/cyber intersection has exploded into the realm of everyday awareness and discussion. The scope of the debate might be new, but the nature of it is old, old, old.?

Every time computers get smarter, people get freaked out. That’s understandable. And yet, the forward march of technological evolution is inevitable. Hockey stick jumps in capabilities, like what has happened with AI recently, freak people out more. But the rules haven’t changed.?

?

And what are those rules? There’s really only one: technology is not the problem. The problem stems from a lack of understanding of the issue and appropriate strategies, preparedness, collaboration, and tools.?

Despite the nearly universal concerns about AI making cybersecurity more dangerous, approximately one in three security and IT professionals have no documented strategy in place to address generative AI risks. Siloed IT and security departments inhibit collaboration. Leveraging outdated tools to tackle generative AI challenges puts everyone at risk. And the threats are evolving so quickly that it can feel impossible to keep pace.?

Understanding of the issue. Strategies. Preparedness. Collaboration. Tools.?

You may have heard the Scandinavian saying that roughly translates to, “There’s no bad weather, just bad clothing.”?

If you saw someone wearing nothing but a swimsuit while standing in the middle of a blizzard, you wouldn’t say, “Darn that blizzard; if only we could stop the snow!” Instead, you’d probably say something like, “Excuse me…it’s freezing. Do you have a warm coat that you could put on? And…perhaps check the weather forecast next time before you go out? If you need help, let me know.” There you have it again: Understanding of the issue. Strategies. Preparedness. Collaboration. Tools.?

We can address the “lack of understanding” element right here.?

On the plus side, Cyber AI can protect organizations by:?

• Detecting threats and responding to attacks faster and more accurately.?
• Identifying patterns and trends to proactively predict an attack before it materializes.?
• Consolidating knowledge from diverse sources to gain a more holistic understanding of the threat landscape, synthesize responses and prioritize next moves.?
• Automating tasks for speed and accuracy, such as isolating infected devices, writing robust code or scheduling patching cycles.?

As we already know, AI can also put organizations at greater risk. For example, many organizations are using AI and automation to take over rote, repetitive tasks and reduce workloads. However, if not given due consideration, these changes could lead to internal complacency, whether due to a false sense of security or diminished oversight.?

Here are a few of the ways bad actors can leverage AI’s power and reach to further their aims:?

• Deploying automation to quickly identify vulnerabilities, scan networks and launch attacks.?
• Using AI-powered social engineering to produce much more convincing and personalized phishing emails.?
• Building malware that escapes detection by mimicking normal network behavior.?
• Democratizing hacking through AI learning (i.e., placing powerful algorithms in the hands of even relatively inexperienced and unskilled hackers).?
• Hacking AI systems through hostile takeovers — essentially turning the AI against the organization it’s supposed to work for.?

To facilitate collaboration, break down the silos between IT and security teams. To shore up end-to-end security, adopt end-to-end tools designed for the realities of the current workplace landscape. To lock down preparedness, ensure these tools are dynamic and can evolve with technology, keeping you ahead of the game.??

Of course, these are all massive simplifications, but it’s a starter kit. My colleagues and I have addressed these topics at length if you want to know more with State of Cybersecurity report.? If AI is a blizzard, don’t get caught in a swimsuit. And don’t waste time being mad at the blizzard. Understanding of the issue. Strategies. Preparedness. Collaboration. Tools. Deploy these tactics, and our blizzard metaphor will have you gleefully building snow people and sledding rather than freezing your tail off.?