Nearly half of security professionals agree GenAI is their biggest security risk

HackerOne has revealed data that found 48% of security professionals believe AI is the most significant security risk to their organization.

  • Sunday, 22nd September 2024 Posted 9 months ago in by Phil Alsop

Ahead of the launch of its annual Hacker-Powered Security Report, HackerOne revealed early findings, which include data from a survey of 500 security professionals. When it comes to AI, respondents were most concerned with the leaking of training data (35%), unauthorized usage of AI within their organizations (33%), and the hacking of AI models by outsiders (32%).

When asked about handling the challenges that AI safety and security issues present, 68% said that an external and unbiased review of AI implementations is the most effective way to identify AI safety and security issues. AI red teaming offers this type of external review through the global security researcher community, who help to safeguard AI models from risks, biases, malicious exploits, and harmful outputs.

“While we’re still reaching industry consensus around AI security and safety best practices, there are some clear tactics where organizations have found success,” said Michiel Prins, co-founder at HackerOne. “Anthropic, Adobe, Snap, and other leading organizations all trust the global security researcher community to give expert third-party perspective on their AI deployments.”

Further research from a HackerOne-sponsored SANS Institute report explored the impact of AI on cybersecurity and found that over half (58%) of respondents predict AI may contribute to an “arms race” between the tactics and techniques used by security teams and cybercriminals. The research also found optimism around the use of AI for security team productivity, with 71% reporting satisfaction from implementing AI to automate tedious tasks. However, respondents believed AI productivity gains have benefited adversaries and were most concerned with AI-powered phishing campaigns (79%) and automated vulnerability exploitation (74%).

“Security teams must find the best applications for AI to keep up with adversaries while also considering its existing limitations — or risk creating more work for themselves,” said Matt Bromiley, Analyst at The SANS Institute. “Our research suggests AI should be viewed as an enabler, rather than a threat to jobs. Automating routine tasks empowers security teams to focus on more strategic activities.”

Over 40% of agentic AI projects will be cancelled by the end of 2027, due to escalating costs, unclear business value or inadequate risk controls,...

AI use is outpacing policy and governance, ISACA finds

Posted 15 hours ago by Phil Alsop
The majority (83%) of IT and business professionals in Europe believe employees in their organisation are using AI.

AI and offshore outsourcing on the rise

Posted 18 hours ago by Phil Alsop
Whitelane Research, an independent organisation specialising in IT sourcing research across Europe, has released its 2025 IT Sourcing Study for the...
55% report cloud environments are more complex to secure than on-premises infrastructure.
As demand for data-driven insights increases, data overload could render UK businesses operationally ineffective.

AI use is outpacing policy and governance

Posted 5 days ago by Phil Alsop
The majority (83%) of IT and business professionals in Europe believe employees in their organisation are using AI.

Fierce competition in global AI leadership

Posted 5 days ago by Phil Alsop
More than four out of five of CEOs and IT executives surveyed are driving AI growth for their companies.
Distributor looks to the future and shares channel growth and transformation drivers as it celebrates its 40th birthday.