How to tackle the 4 biggest threats right now.
With advancing technology, cybersecurity threats are now posing risks many teams aren’t ready for.
Katelyn Ringrose, a privacy and cybersecurity attorney at McDermott Will & Schulte, sees these problems every day and says the biggest hazards are already here.
“Threats like these aren’t theoretical anymore. They’re happening right now, and the only real defense is preparing before something goes wrong,” she said.
Ringrose, who will be speaking at AI Horizons Conference, broke down the top threats she sees inside organizations today and why spotting them early is becoming a critical brand-protection skill.
- AI-powered scams and frauds
Generative AI is making scams more realistic, more personal and harder to spot.
“The rise of gen AI has created environments where more realistic, targeted scams and fraud are thriving, particularly those targeting executives,” she said.
These scams often look and sound like someone you know, because tools now make deepfake videos, voice clones and near-perfect impersonations cheap and easy to produce, she said.
Bad actors are having greater success reaching executives directly and demanding money, she said.
The key is preparing before a scam hits. Companies must stick to corporate channels.
“Make sure you’re only responding to emails on your corporate server…and that you’re not going outside your corporate environment,” Ringrose said.
Don’t be embarrassed to escalate an issue when you’re unsure how to handle it.
“Pull other people in when you’re not sure. If you think that maybe you’ve fallen for a fraud, alert the people in your organization who can help,” she said.
Then insist on verification. A single line like “call me back on your corporate phone” can stop a scam in seconds.
- Threats to remote workforces
Remote work has made life easier for employees, but also for threat actors. One major risk Ringrose highlights are foreign IT workers who intentionally get hired at U.S. companies to gain access to systems and data.
“There’s been a corresponding rise in threat actors, most notably North Korean IT workers,” she said. “These cases pose significant risk… and all of that is undermined by this particular threat actor.”
Many companies assume it won’t happen to them.
“A lot of industries are thinking, ‘Oh, that’s something that happens to big tech companies.’ In fact, it’s actually the smaller companies…that are being targeted,” she said.
To mitigate this threat, don’t rely solely on background check vendors. They’re not foolproof, Ringrose said.
Verify live identity whenever possible. Companies should also always conduct live interviews, even for remote hires, she said.
“Make sure the person you’re speaking with is a live person, they’re where they say they are and they’re who they say they are.”
- State-level scrutiny of sensitive data
State Attorneys General are aggressively enforcing laws that protect children and sensitive data today, Ringrose said.
“AGs are interpreting their laws in unique and new ways to address digital harms to minors,” she said.
This includes actions under state privacy laws and unfair-and-deceptive-practice laws. Even if a company thinks it’s compliant, evolving interpretations can create surprise liabilities, she said.
To protect your brand, audit your data collection and ad-tech setup, know what data could be considered sensitive and don’t rely on outdated interpretations of privacy law.
If your product touches kids or teens in any way, assume scrutiny is coming, she said.
- Unclear liability standards
As AI becomes embedded into everything from hiring tools to customer chatbots, responsibility gets murky.
If an AI tool fails, discriminates or mishandles data, who’s liable? The developer? The brand that deployed it? The vendor chain behind it?
Brands must prepare for moving legal targets, Ringrose said. Do this by mapping your AI vendors and their responsibilities, documenting how each tool is used and tested, and staying close to legal counsel as standards evolve.
None of these threats are theoretical. They’re already happening, already costing companies millions and pulling brands into regulatory crosshairs, she said.
The strongest brands are the ones that prepare before anything goes wrong, train their people, test their systems and stay alert as threats evolve.
“Regulators and attackers are moving faster than companies are,” Ringrose said. “Protecting yourself isn’t optional anymore. It’s the cost of doing business.”
Register here to learn more from Ringrose and other industry experts during Ragan’s AI Horizons Conference Feb. 2-4 in Ft. Lauderdale, Fl.
Courtney Blackann is a communications reporter. Connect with her on LinkedIn or email her at courtneyb@ragan.com.
The post As tech accelerates, so do cyberthreats. Here are the top risks brands can’t ignore. appeared first on PR Daily.
