AI Helping Bad Actors Hack You

We noticed an increasing number of publications focused on how bad guys are using (or will be using) AI to attack businesses. Additionally, how this is bordering an existential crisis.

Let me tell you, if a bad actor using AI causes unexepcted risk to you - then it is highlighting your gaps that you either irgnored or were not aware of [due to inadequate expertise].

I'm sure you are saying...

but it costs too much to secure everything

securing our [thing] causes too much disruption

the security or risk solution is too complex

..and so on

AI is not enabling 11-year olds nor 90-year olds to morph into Hollywood style hackers. Certainly, we do not discount the small percentile who could stumble their way into some form of hacking, or actual hackers using customized AI (e.g. LLMs) to assist in their speed to market.

But the principle still stands, if you are defeated, AI likely had little to do with the root cause.

Fact:

Google implemented MFA circa 2009, becoming a use-case on MFA effectiveness at reducing risk (risk mitigation) for little cost. Many companies, some 14-years later, are still working on it.