Welcome to week two of Cybersecurity Awareness Month!
Cybersecurity and Artificial Intelligence
Few threats have rocketed to the top of the infosec world’s worry list like AI-powered phishing emails, scams and deepfakes. The goal of the second level and the associated focus content is to ensure your users are well-versed in these threats both as they go about their work life and explore the internet in their down time.
Click on the image below to view a five-minute video to learn how cybersecurity and AI don't mix.
What is a Deepfake?
A deepfake is a synthetic, manipulated video, audio, or image that appears to be authentic but has been created using artificial intelligence (AI). These fakes can show a person saying or doing something they never did, often used maliciously for scams, disinformation, blackmail, or creating non-consensual pornography. The term is a portmanteau of "deep learning" and "fake".
How they work:
- Deep learning: A creator trains an AI, often using a type of algorithm called a Generative Adversarial Network (GAN), on existing footage of a person.
- Pattern recognition: The AI learns the person's facial features, expressions, and voice from hours of video to the point where it can identify patterns from all angles.
- Manipulation: The AI can then replace a face in existing footage with the target's face, manipulate facial expressions, or create realistic synthetic speech to make the person appear to say or do something they never did.
Common uses and risks:
- Malicious uses: Deepfakes are often used for malicious purposes like creating fake content, impersonating executives in financial scams, or spreading political disinformation.
- Benign uses: They also have legitimate applications in areas like entertainment, such as creating digital clones of actors for films, or in art and education to create interactive content.
- Misinformation and distrust: Deepfakes can make it difficult to distinguish between real and fake news, potentially influencing elections and eroding trust in authentic media.
How to spot a deepfake:
- Look for visual inconsistencies: Pay close attention to details like the eyes, eyebrows, and hands for unusual movements or a lack of natural shadows.
- Fact-check: Research the context of the video or image. Does the claimed timing and location match other facts?
- Listen for audio anomalies: Deepfake audio may sound robotic or have unusual background noise.
- Question urgent requests: Be suspicious of unexpected or urgent requests for financial transactions, especially if they come from a senior executive via video or audio call.
Download this week's infographic on protecting your Digital Data Security
Article: Think you're immune to scams?
Many of us think we can identify a scam no matter what form it shows up in. But in truth, anyone can fall victim, even the most experienced cybersecurity expert. Before you become too confident in your own immunity to scams, check out this article from Michael Wilson, a New York Times writer with two decades of experience.