A recent Kaspersky study reveals that businesses are increasingly worried about the growing use of artificial intelligence (AI) in cyberattacks. According to the findings, 76% of surveyed companies reported a rise in cyber incidents over the past year, with almost half of respondents (46%) noting that many of these attacks were likely AI-driven. The study underscores the reality that AI, which has revolutionized numerous industries, is now also empowering cybercriminals, adding an additional layer of complexity to the threats businesses face.
In its latest study titled “Cyber defense & AI: Are you ready to protect your organization?” Kaspersky gathered the opinions of IT Security and Information Security professionals working for SMEs and Enterprise-level companies regarding new challenges in protecting their organizations against cyberattacks involving the use of AI. The majority of respondents participating in the survey (76%) said that the number of cyberattacks in their companies increased in the last 12 months, and 46% believe that the majority of those cyberattacks included the use of AI.
Leveraging AI by cybercriminals is a serious concern for 72% of respondents. The pressure of this challenge is pushing companies to reassess their cybersecurity strategies and look for solutions that are both proactive and comprehensive. To effectively tackle AI-amplified threats, businesses consider regular training to build internal expertise (92%), highly qualified personnel (91%), and relevant external cybersecurity expertise (90%) as the most important factors for protecting their organizations. They also recognize the importance of having enough staff in their IT teams (80%) and using third-party security solutions (86%).
Despite rising awareness, the study reveals a concerning gap in readiness among many companies. Over half of the organizations surveyed lack crucial resources needed to address these sophisticated threats – 57% don’t have the relevant external cybersecurity expertise at their disposal, 54% report that their IT teams are not large enough, 49% lack highly qualified staff, and 52% fall short in regular training efforts. Additionally, 53% of respondents do not think they have adequate security solutions in place, exposing them to potential vulnerabilities. While most respondents claim to know how to address this lack of resources, the fact remains that they aren’t in place.
“The cybersecurity landscape today mirrors past challenges, with businesses questioning if current solutions suffice. Ransomware, once a primary threat, now demonstrates a dangerous surge, and business decision-makers start questioning the causes of this resurgence. The recent hype around AI offers an easy, if not entirely correct explanation. In reality, while using AI to create convincing phishing messages or more effective reconnaissance may be of some help, the root causes are most often more straightforward: cybercriminals have become more organized, better at collaborating, developing innovative attack strategies, and lowering the barriers for less skilled and resourceful attackers. So, while it’s useful to keep an eye on AI progress that can enable both attackers and defenders with new options, there are solid strategies companies can – and should – implement immediately. Companies should prioritize securing critical IT infrastructure with robust, multi-layered solutions that offer a unified security context. An XDR ecosystem, combined with skilled expertise – whether in-house or through a managed service – can greatly enhance defenses. Additionally, ongoing employee training, including cybersecurity basics and safe AI practices, adds another critical layer of protection for the organization.” – says Oleg Gorobets, corporate infrastructure protection expert at Kaspersky.
The full report with more findings is available via this link.
