AI NewsWaveSK Shieldus Analysis: In Financial Sector Hacks, AI Automated Existing Attacks
Key points
- Financial sector hacks were automation and escalation of existing attacks
- Shadow IT and APIs, blind spots in management, were the targets
- Industry players such as Eversafe warn of AI-automated attacks
On Oct. 8, SK Shieldus released a guide to analyzing and responding to breaches that target Shadow IT in the age of AI-automated attacks. EQST, the company's white-hacker group, analyzed the recent financial sector hacking incidents not as a case of AI creating new attack techniques but as a case of automating and escalating existing attacks.
According to the analysis, hackers abused AI-based tools to target Shadow IT, a poorly managed blind spot in companies, and weaknesses in API security. Datanet reported concerns that, because AI played a role in probing existing attacks faster and at larger scale, similar incidents could occur more often and the damage could grow.
Security industry warnings continued. Eversafe said it detected an AI-driven autonomous attack on its customers' services that calls APIs directly without a browser, and explained that a way to respond to such attacks while keeping existing authentication and access controls is needed. Techworld reported that, with security incidents recurring in South Korea's financial sector, there are calls to hurry to strengthen security against AI attacks.