The rise of AI has led to employees sharing confidential data and company secrets with AI tools, creating a new source of data breaches. Organizations struggle to find a balanced response, either banning AI or allowing unchecked use. Cybercriminals are exploiting this trend, using AI tools for malicious purposes. A study reveals widespread AI tool usage, with workers sharing sensitive data. Organizations must navigate this complex landscape to manage risks effectively.
Why it matters: As AI becomes more integrated into the workplace, employees are entrusting AI tools with sensitive information, leading to potential security vulnerabilities. Organizations’ lack of preparedness and employee education on AI usage compounds this issue.
A number of leading organizations have implemented “No AI” rules. Some of these companies include Samsung, Verizon, JPMorgan Chase, Accenture, Northrup Grumman, and more. AI has made a name for itself, but the increased risk of cybersecurity is not worth it to some companies.
- In a study with CybSafe of 1,000 people, 50% use AI tools at work, 65% have put company information into AI tools, and 38% have shared confidential information they wouldn’t tell a friend. 70% of study participants believe the positives outweigh the negatives when it comes to taking risks with AI.
- “Generative AI has enormously reduced the barriers to entry for cyber criminals trying to take advantage of businesses.” Says Dr. Jason Nurse, director of science and research at CybSafe, and associate professor at the University of Kent
- A significant portion (21%) of respondents struggle to differentiate between content created by humans and AI. This blurring of lines could aid cybercriminals in crafting more persuasive phishing messages. Overall, familiarity with AI-generated content diminishes the distinction between authentic and fake content.
