Report: Many Companies Are Unprepared for AI Cybersecurity Threats and Attacks

The rapid rise of artificial intelligence (AI) has revolutionized many industries, including cybersecurity. However, the same AI tools designed to enhance security have also become a double-edged sword. AI is now being weaponized by cybercriminals, creating more sophisticated threats that many organizations are not prepared to handle.

A recent report from Keeper Security highlights a concerning gap: while many companies have implemented AI-related policies, they remain unprepared to combat AI-driven cyberattacks effectively.

AI-Driven Threats Growing Faster Than Preparedness

The research uncovers some stark realities:

• 84% of IT and security leaders say AI-enhanced tools have made it harder to detect phishing and smishing attacks, already prevalent threats in cybersecurity.
• 81% of organizations have established AI usage policies for employees to address these challenges.
• Despite this, 35% of respondents feel underprepared to deal with AI-driven threats, especially compared to traditional cyber risks. This growing discomfort underscores the need for businesses to take more robust actions to defend themselves.

Why AI-Driven Attacks Are a Major Concern

AI allows attackers to automate and scale their efforts in ways never seen before. Phishing and smishing attacks, often targeting employees through deceptive emails or text messages, are now more sophisticated. AI can create personalized phishing emails at scale, making detection harder even for trained security teams.

More than half (51%) of security leaders surveyed view AI-driven attacks as the most serious threat to their organizations, a clear indication of the challenges ahead.

How Organizations Are Fighting Back

To combat these advanced threats, organizations are implementing several strategies:

• Data encryption: Used by 51% of IT leaders, encryption is crucial in protecting sensitive information. It’s a first line of defense in preventing unauthorized access, especially against AI-powered intrusions.
• Employee training: 45% of organizations are focusing on training employees to recognize and respond to AI-driven attacks. Awareness is critical, as many cyberattacks rely on human error to succeed.
• Advanced threat detection systems: 41% of companies have invested in cutting-edge detection tools to help identify and neutralize sophisticated threats. AI-driven cyberattacks are difficult to detect without the right technology in place.

The Importance of Reinforcing Cybersecurity Fundamentals

Despite the advent of AI threats, organizations must not lose sight of traditional cybersecurity practices. Data encryption, employee education, and threat detection systems remain essential. These strategies should be regularly reviewed and updated to keep up with evolving threats.

Leveraging Advanced Security Models: Zero Trust and PAM

More organizations are turning to advanced security frameworks like Zero Trust and Privileged Access Management (PAM).

• Zero Trust: This approach requires continuous verification of users, devices, and applications, ensuring no one can access critical systems without proper authorization. It’s especially effective against AI-driven attacks that attempt to exploit weaknesses in a company’s infrastructure.
• Privileged Access Management (PAM): By securing high-level credentials, PAM protects an organization’s most sensitive accounts from AI-driven intrusions targeting privileged users.

Darren Guccione, CEO and Co-Founder of Keeper Security, emphasizes the importance of combining these modern security models with traditional practices. “AI-driven attacks are a formidable challenge, but by reinforcing our cybersecurity fundamentals and adopting advanced security measures, we can build resilient defenses against these evolving threats.”

Building Resiliency Through Proactive Measures

A key takeaway from the report is the need for proactivity. Organizations must:

• Continuously review and update their security policies.
• Conduct regular security audits.
• Cultivate a culture of cybersecurity awareness across all levels of the company.

Vigilance Is Key

AI-powered threats are here to stay, and organizations must adapt quickly. By combining proven cybersecurity fundamentals with modern approaches like Zero Trust and PAM, companies can stay ahead of the curve. However, these measures must be applied consistently and proactively to make a meaningful difference. The evolving nature of AI means that cybersecurity will always be a moving target, and perpetual vigilance is required.

Are businesses doing enough to address these growing threats, or is there still a long way to go? The future of cybersecurity depends on how well organizations can bridge the gap between policy and preparedness.