A Spanish entity has experienced a personal data breach due to an AI system, with human oversight involved This article explores data breach ai. . The report indicates that an unknown hacker utilized a "well-known language model" to breach corporate personal data repositories.
The agency notes that AI's impact extends beyond the emergence of new threats, as it enables the rapid, scalable, and automated execution of known techniques, significantly shortening the time between vulnerability identification and exploitation. AEPD revealed that an unidentified human puppeteer utilized AI to expedite, automate, and possibly shorten the time it would take to identify and exploit vulnerabilities in corporate applications, thereby accessing personal data.
As CCN pointed out, "Combining open-source intelligence with direct reconnaissance against infrastructure allows attackers to precisely map digital assets like websites, programming interfaces, cloud services, or infrastructure-as-a-service environments." The attacker, as noted by AEPD, instructed their AI to search for vulnerabilities in "generic" files belonging to a victim organization. Once inside the corporate application, our AI-driven attacker meticulously searched for vulnerabilities, enabling it to modify personal data and access invoices."
Related: Cyber Attack Targets South Korean Media and Automotive Sectors. In this future, where autonomous systems can chain together familiar cyberattack steps without a human manually controlling each step, "Defenders now have a shorter time horizon to react," says Aviv Nahum, the co-founder and CEO of Above Security.
