"Historically, phishing emails have been somewhat easy to spot thanks to sloppy drafting," Finch said.
"In particular, phishing emails created by a hacker unfamiliar with a certain language [have] tended to be easy to spot due to poor grammar, illogical vocabulary, and bad spelling."
But AI allows many more people — regardless of their language skills — to quickly and cheaply generate convincing text for use in phishing emails, Finch said.
Here are three steps cybersecurity leaders can take to strengthen their organizations' cybersecurity programs in the age of AI.
The framework should include risk indicators, the AI ecosystem and regulations, and should "address the unique security considerations associated with AI within their organizations, and reducing their AI security risk," he said.
Persons:
Chino, —, Brian Finch, Pillsbury Winthrop Shaw Pittman, Finch, Kyle Kappel, Kappel, CISOs
Organizations:
KPMG