Generative AI is new attack vector endangering enterprises, says CrowdStrike CTO

▤ Summary

Cybersecurity researchers have been warning for quite a while now that generative artificial intelligence (GenAI) programs are vulnerable to a vast array of attacks, from specially crafted prompts that can break guardrails, to data leaks that can reveal sensitive information. "I see with generative AI a lot of people just rushing to use this technology, and theyre bypassing the normal controls and methods" of secure computing, said Zaitsev. GenAI programs, said Zaitsev, are "part of a broader category that you could call malware-less intrusions," where there doesnt need to be malicious software invented and placed on a target computer system. "We take advantage of the property of LLMs where the user can ask an open-ended question, and then we use that to decide, what are they trying to do, and then we use more traditional programming technologies" to fulfill the query. Also: AI is changing cybersecurity and businesses must wake up to the threat "Weve already invested in building this robust platform with APIs and search capability, so we dont need to overly rely on the LLM, and now were minimizing the risks," said Zaitsev.

▦ Linked Companies

CrowdStrike

$1B+