A recent report by Bugcrowd highlights significant findings regarding the rapidly evolving landscape of artificial intelligence (AI) within the cybersecurity domain. The survey, encompassing responses from 1,300 ethical hackers and researchers, reveals that 82% of respondents express concerns about the pace at which the AI threat landscape is advancing, suggesting that it is progressing too quickly for adequate security measures to be implemented.
The research indicates a notable shift in the perception and application of AI technology among hackers. In 2024, approximately 71% of those surveyed believe that AI contributes value to the field of hacking, a stark increase from just 21% the previous year. Reflecting this growing reliance on technology, 77% of hackers are now reportedly using generative AI tools, marking a 13% rise from 2023.
Despite the burgeoning use of AI in hacking, the report underscores a belief among hackers that AI technologies still lag behind human capabilities. Only 22% of participants opine that AI could outstrip the proficiency of human hackers, and a mere 30% maintain that AI can emulate human creativity effectively.
Dave Gerry, CEO of Bugcrowd, acknowledges AI's influential role within the hacking ecosystem, asserting that it is reshaping the tactics employed to identify and report vulnerabilities. He speaks to the benefits of collaborating with an innovative community at the forefront of cybersecurity: "Bugcrowd is in a privileged position to work with a creative, forward-thinking community that thrives on the cutting edge of cybersecurity. Celebrating hackers is part of the core of what we do at Bugcrowd, and these insights can help businesses understand the unique value this community brings to fighting against today's AI-driven cyberattacks."
The report also highlights that 93% of hackers agree that companies employing AI tools have inadvertently established new angles for attack, with 86% believing AI has fundamentally altered their hacking methodologies. Furthermore, 74% assert that AI has simplified the hacking process, making it more approachable for newcomers. Nonetheless, confidence remains high among hackers, with 73% feeling assured in their ability to uncover vulnerabilities within AI-driven applications.
Patrick Harr, CEO at SlashNext Email Security+, reflects on the findings, suggesting that "AI is game-changing for business and organizations; however, it is also a productivity breakthrough for hackers to attack at scale at near zero cost." He predicts that AI-assisted attacks, already prevalent in domains like Business Email Compromise (BEC), phishing, and social engineering, will only grow more common. Harr anticipates these sophisticated attacks will extend to Malware and Large Language Model (LLM) poisoning in the near future, as emphasised in Bugcrowd's latest study.
For those interested in exploring these insights further, Bugcrowd has made the full "Inside the Mind of a Hacker 2024" report available on its website.
Source: Noah Wire Services