CISOs are still more concerned about ransomware than AI-powered cyber attacks

By James On Apr 16, 2024

A new survey has found that ransomware remains the CISO’s top concern, even as AI cyber attacks continue to intensify.

The research, conducted by ClubCISO in partnership with Telstra Purple, shows that ransomware attacks (67%) rank higher than both software supply chain/third party risks (64%) and software vulnerabilities (59%) as the biggest threat to organizations .

While AI-powered cyberattacks are gradually making their way onto the CISO radar, they are not currently forcing a change in priority as the focus remains on the costly consequences of stealing or encrypting data, especially as ransom demands continue to rise to higher levels. and higher levels.

Real threat or just a precaution?

But while AI-powered cyber attacks are not yet high on the threat list, three in five (62%) of CISOs believe the security industry is not ready to tackle such attacks, and that the risk of an AI attack cyber attacks that have a significant impact on their business are at a critical or high level (63%).

However, these concerns are not reflected in cybersecurity spending, with more than three-quarters (77%) of respondents saying AI has not increased their budget. However, some teams are reflecting this concern in other ways when hiring new staff, but this remains a minority: only 6% of CISOs are looking for new hires with AI threat skills, and 7% are looking for people with the skills to use them. AI as a defensive tool.

Commenting on the survey results, Rob Robinson, head of Telstra Purple EMEA, said: “Our member survey highlights that, contrary to some of the messaging we’ve seen around AI, CISOs are taking a measured, wait-and-see approach before making a decision. any important investment decisions. While AI has the potential to expand a range of attack tactics, such as creating more convincing social engineering attacks, CISOs are clearly more concerned about threats as they are now.”

“In recent years we have seen CISOs evolve into strategic leaders rather than technology and domain experts. The rise of AI and the threat it poses are clearly balanced by a range of technology, skills, risks and macroeconomic factors,” he concluded.