What it is
Artificial Intelligence (AI) is technology that's designed to do things that normally require human intelligence. AI can be used to scrape public data off your website, or to quickly create believable scams and phishing emails in bulk.
While AI tools make it easier for scammers, the scams still work the same way. The scams only work if you or your staff provide information, click a link or send the scammers money.
How to protect your business from AI
Here's what to do to protect your business.
Install software updates
Keeping your devices and software up-to-date is one of the most effective things you can do to keep your system safe.
Install any updates to software and operating systems as soon as they’re available – set your system preferences to install updates automatically if you can. Make sure staff know to do this too.
Implement two-factor authentication (2FA)
Implementing 2FA means that anyone who logs in to your system will need to provide something else on top of their username and password, to verify that they are who they say they are. You can implement it on internal systems and your customer-facing systems.
Secure your devices
Enable anti-malware software on any device that accesses your business data or systems. This includes both company-owned devices and any personal devices your staff use for work.
Secure your network
There are different types of security features you can add to your network to filter traffic and restrict access.
Firewalls help control where connections go, and proxies can act as an intermediary between different computers or networks. For example, you can use a web proxy to send traffic from your business network to the internet, and it could filter that traffic and prevent any bad traffic – to sites hosting malware, for example – from getting through.
You can report an online issue or security incident like this to us at CERT NZ.
CERT NZ’s Insights and Intelligence team produces periodic threat reports to illustrate and identify notable trends in information we collect. This leads to highlighting threats and possible actions or interventions for consideration.
CERT NZ is in the process of creating a series of sharable threat reports on AI.