97% of organisations faced breaches or security incidents related to GenAI this year

97 per cent of organisations using generative AI have faced security incidents or data breaches linked to the technology this year, according to Capgemini Research Institute.

  • Tuesday, 3rd December 2024 Posted 15 hours ago in by Phil Alsop

As generative AI becomes more integrated into business operations, over half of these companies (52 per cent) reported financial losses exceeding $50 million, prompting 62 per cent to request larger budgets to mitigate risks.

The surge in cyber threats, including data poisoning, deepfakes, and data leakage, is worsened by employee misuse and highlights the growing vulnerabilities introduced by generative AI.

However, while AI expands the cyberattack surface, it also offers significant benefits. 60 percent of companies surveyed consider AI crucial for faster and more accurate threat detection and response. Over half (58 per cent) also believe AI will strengthen proactive defence strategies, allowing cybersecurity teams to focus on combating complex threats.

Despite these advancements, generative AI remains contentious. It empowers security teams with tools to detect and mitigate risks more efficiently but also introduces new challenges that require continuous monitoring, ethical guidelines, and robust employee training.

Reacting to the findings, Andy Ward, SVP international of Absolute Security, commented: “AI is transforming the cybersecurity landscape, being used for both attacks and defence as a double-edged sword. While AI’s capabilities can detect threats faster and enable proactive defences, the fact that almost all of organisations using generative AI have reported security incidents highlight the urgent need to bolster cyber resilience.

“These AI-powered attacks typically come in the form of generative-AI generated phishing attacks or AI-driven malware, but increasingly, cybercriminals are also using AI to identify lucrative targets for ransomware attacks and to personalise the ransom demands in search of larger pay outs.”

“Our research found that 54 per cent of CISOs feel unprepared to handle AI-powered threats, with AI expanding attack surface and introducing new vulnerabilities. To mitigate these risks, organisations must implement robust network visibility to monitor devices and applications for suspicious activity, freezing, or shutting off, potentially compromised devices in order to minimise the risks of AI-driven threats.”

Earlier this year, Microsoft researchers found that UK organisations using AI tools for cybersecurity were twice as resilient to attacks as those that didn’t. The study also concluded that boosting AI adoption could save the UK economy £52 billion annually, down from the £87 billion lost to cyberattacks each year.

“The use of AI and Gen AI has so far proved to be a double-edged sword. While it introduces unprecedented risks, organisations are increasingly relying on AI for faster and more accurate detection of cyber incidents. AI and Gen AI provide security teams with powerful new tools to mitigate these incidents and transform their defence strategies. To ensure they represent a net advantage in the face of evolving threat sophistication, organizations must maintain and prioritize continuous monitoring of the security landscape, build the necessary data management infrastructure, frameworks and ethical guidelines for AI adoption, and establish robust employee training and awareness programs,” said Marco Pereira, Global Head Cybersecurity, Cloud Infrastructure Services, Capgemini.

Leaders feel the pressure; 98% report increased urgency to deliver on AI and 85% believe they have less than 18 months to act.
AI and generative AI (GenAI) are driving rapid increases in electricity consumption, with data centre forecasts over the next two years reaching as...

GTT study reveals SASE and SSE adoption surge

Posted 15 hours ago by Phil Alsop
Vulnerabilities, ransomware and data theft top the list of cybersecurity concerns as enterprises move toward unifying networking and security teams...
More than 86% of EMEA CFOs and CIOs surveyed say their relationship has strengthened, with 43% of CFOs linking it to improved business outcomes.
CreateFuture warns UK risks ‘lagging behind’ without a clearer AI vision amid cost, security and skill concerns.
70 percent of companies in the UK have fallen victim to a cyberattack at least once in the past two years. This is according to the "Cyber Security...
Senior executives divided on attitudes to risk and organizational change, finds research by Orgvue.
Over half of workers believe AI-powered tools will only have a moderate adoption in the workplace.