Increasing use of generative, agentic, and automation AI elevates cybersecurity incident risks from threat actors or misconfiguration.
“Our increasing use of AI, including generative AI, agentic AI and AI-enabled automation technologies, may elevate the risk of cybersecurity incidents, whether through our authorized use of such technologies to perform business or operational tasks with limited human oversight or through malicious use by threat actors to automate, scale or adapt attacks against our systems, products, employees, customers, suppliers or partners. These technologies may be leveraged by threat actors to generate more convincing phishing or social engineering content, identify and exploit vulnerabilities more efficiently, create malicious code that is more difficult to detect, or automate, scale, adapt or obscure cyberattacks. In addition, AI systems may inadvertently expose sensitive information if not properly secured, governed, configured, monitored, or connected to systems or data containing confidential information. As AI tools become more accessible and sophisticated, the potential for their misuse increases, further complicating efforts to detect, prevent, and respond to cybersecurity threats.”