AI is supercharging hacking, and your local hospitals and banks aren’t ready

In March, Janice Malone began getting calls about suspicious activity from her nonprofit organization, Vivian’s Door. Vivian’s Door, headquartered in Alabama, typically provided training, resources, and community to underserved and minority-owned businesses. The work sometimes put it in close contact with these companies’ financial data, which was stored on its systems. But suddenly, concerned callers from all over the world warned they’d been getting emails “begging for money” – which she hadn’t sent. The organization’s third-party IT team pulled its systems offline for three days while they investigated the issue and plugged up the vulnerability, only to discover that an AI-powered phishing tool had been sending out the emails, mimicking Malone’s writing style and knowledge of the nonprofit’s recent projects.

The article claims that AI is rapidly advancing hacking techniques, making traditional cybersecurity measures obsolete. It cites Vivian’s Door as a prime example: the AI tool could generate convincing emails based on minimal input, fooling donors and stakeholders alike. However, the article assumes that hospitals and banks are lagging behind, failing to adopt AI-driven cybersecurity solutions. While it’s true that many institutions are slow to adopt new tech, the assumption that AI can fully replace human intuition and context is a bit overstated.

Consider this: AI models are trained on data, and if that data is biased or incomplete, the AI’s outputs can be similarly flawed. In Vivian’s Door’s case, the AI likely relied on recent projects and Malone’s email patterns, but what if a hacker had more nuanced knowledge of the nonprofit’s inner workings? The AI might struggle to capture that depth. Moreover, the article doesn’t explore the cost of implementing AI-driven cybersecurity—hospitals and banks with tight budgets might balk at the expense.

Additionally, the article suggests that AI is solely responsible for the rise in hacking, overlooking human factors like poor password hygiene and social engineering. Even with AI, hackers still need to exploit human vulnerabilities. A clever AI might generate perfect emails, but if recipients ignore basic phishing cues, the hack succeeds anyway. The article could have used more examples of AI’s limitations—like its tendency to hallucinate or produce inconsistent results—to round out its argument. After all, AI is powerful, but it’s not yet the all-knowing, all-conquering force it’s sometimes made out to be.

So, while AI is indeed supercharging hacking, and many hospitals and banks are behind the curve, the article could have dug deeper into the nuances of AI adoption, cost considerations, and the ongoing interplay between AI and human factors in cybersecurity. With a bit more wit and a sharper eye for detail, the article would have nailed the perfect blend of insight and humor, proving that AI can boost hacking, but it’s still got a ways to go before it dominates the cybersecurity battlefield.