2025-05-29

SECURITY HINTS & TIPS:

Artificial Intelligence, Security, and You

Artificial Intelligence (AI) Defined

As artificial intelligence (AI) becomes a larger part of everyone’s lives, it’s important to understand the threat it poses to security. Let us review what AI is, how it can be used for malicious purposes, and what it means for security.

The concept of AI refers to computers and machines that perform tasks normally requiring human intelligence. AI systems work by being trained on large amounts of data that is then analyzed and used to make decisions. There are many forms and functions of AI. Generative AI, for example, can generate content such as text, images, audio, and video.

AI-Powered Attacks

  • Impersonation: Given that AI can create realistic video or audio recordings, attackers can use it to generate content that appears to come from a trusted individual saying or doing something they actually aren’t.
  • Voice Phishing: A sampling of someone’s voice can be used to generate speech that sounds like a real person, tricking people into believing they are talking with someone they know.

  • Automation: Through AI automation, social engineers can cast a wide net and increase the volume and permutations of their attacks. This process requires less effort on the attacker’s part and allows them to target a greater number of people.

MGC CYBER
HEROES

Our Fantastic users help protect our organization every day by identifying and reporting phishing attempts using the Phish Alert Button (PAB). Cassandra Driscoll from Diamond Group recently identified a fraudulent email disguised as a legitimate voicemail designed to steal login credentials.

Thanks to Cassandra’s keen awareness and prompt action, our Cybersecurity team swiftly intervened, isolating the threat before any damage could occur. Her diligence and commitment to IT security protocols were instrumental in preventing this attack.

A huge thank you to Cassandra and all our Cyber Heroes for their continual efforts to safeguard our organisation!

AI, Security, and You

Cybercriminals and scammers are already using AI to their advantage. Here’s what you can do to identify and avoid AI-powered attacks at work and home:

Remain Skeptical and Thorough: The power of AI means that everyone needs to take extra precautions in their daily routines. For example, when handling emails, thoroughly inspect the entire message and never open random links or attachments.

Follow the Signs: Even if AI helps attackers hide their intentions, there will still be warning signs. Stay alert for common indicators of scams, such as threatening language, urgent messages, and suspicious requests.

Utilize Zero Trust: The zero trust model assumes everything is untrustworthy until proven otherwise — a great approach to all things security. At a basic level, never assume someone is who they claim to be, regardless of how they engage with you.

Follow Policies: Always following policy is a simple, effective way to maintain security. If you’re allowed to use AI tools for work, be sure you understand your organization’s guidelines for doing so.

Reference: ISMS 27001 – 05.4 AI POLICY

Manitoulin Group of Companies Security Team
Cybersecurity@manitoulingroup.com

Stop, Look, and Think. Don’t be fooled.