NEWS  Security  January 24, 2024  Reading time: 3 Minute(s)

Max (RS editor)

In its recent Risk Register 2023 report, the UK government has officially designated Artificial Intelligence (AI) as a "Chronic Risk". Now, the National Cyber Security Centre (NCSC) has issued a stark warning about the rapidly increasing global ransomware threat, attributing this surge to the growing integration of AI in malicious cyber activities.

The newly released AI-Cyber Threat Assessment by the NCSC sheds light on the pivotal role AI plays in amplifying both the volume and impact of cyber attacks. Despite the success of OpenAI's ChatGPT, the report underscores that malevolent actors have exploited this chatbot, giving rise to the creation of sinister AI-powered counterparts such as WormGPT and FraudGPT.

The report outlines that AI, currently harnessed by cybercriminals, is lowering entry barriers for less experienced threat actors, including hackers-for-hire and hacktivists. This empowerment enables more efficient access and information-gathering operations, thereby expanding the reach of cyber threats. The heightened accessibility and AI’s ability to refine victim targeting are anticipated to intensify the ransomware threat globally over the next two years.

Ransomware remains a pervasive cyber threat for UK organizations and businesses, prompting cybercriminals to adapt their strategies for increased efficiency and profit. In response, the UK Government has committed £2.6 billion through its Cyber Security Strategy to strengthen the nation’s resilience.

James Babbage, Director General for Threats at the National Crime Agency, emphasizes:

"Ransomware continues to be a national security threat. As this report shows, the threat is likely to increase in the coming years due to advancements in AI and the exploitation of this technology by cybercriminals. AI services lower barriers to entry, increasing the number of cybercriminals, and will boost their capability by improving the scale, speed, and effectiveness of existing attack methods. Fraud and child sexual abuse are also particularly likely to be affected."

The report reveals that both the NCSC and private industry are actively incorporating AI into cybersecurity practices, focusing on advanced threat detection and security by design. In November 2023, a 40-country alliance was announced to collectively combat the evolving threat of ransomware.

Suid Adeyanju, CEO of Riversafe, and a cybersecurity expert, emphasizes the critical need for organizations to enhance their threat intelligence. He urges a comprehensive strategy that combines advanced technologies with increased observability, stressing the importance of thorough training for all staff due to the growing risk cyber threats pose to unprepared businesses.

The UK, hosting the AI Safety Summit at Bletchley Park in November 2023, endorsed The Bletchley Declaration. This initiative, a global effort, aims to address risks associated with AI’s cutting-edge developments and promote its secure and responsible advancement.

The thriving AI sector in the UK, currently employing 50,000 individuals and contributing £3.7 billion to the economy, aligns with the government’s commitment to advancing the national economy and job market in tandem with technological progress, as outlined in the Prime Minister’s five key priorities. As the cyber landscape evolves, this assessment serves as a call to action for global collaboration and proactive measures to safeguard against the growing menace of AI-enhanced cyber threats.

 IMAGES CREDITS: NCSC | WIKIPEDIA | REVIEW SPACE