Samsung SDS "This Year's Cybersecurity Focus is AI"

Hackers Create Massive Malware Using Generative AI for Cyber Attacks
Also Covers Five Key Areas: Cloud, Sensitive Information, Ransomware, Network, and More

Samsung SDS announced on the 23rd that it has analyzed cyber security issues that occurred domestically and internationally last year and selected the top 5 cyber security threats to watch out for this year.

The 'Top 5 Cyber Security Threats' are ▲security threats exploiting artificial intelligence (AI) ▲cloud security threats in hybrid environments ▲major data leaks such as personal and sensitive information ▲continuously evolving ransomware ▲network security threats due to the expansion of attack targets.

In particular, as technologies triggered by generative AI rapidly spread across industries, new security threats have emerged. Hackers are exploiting generative AI such as 'Worm GPT' and 'Fraud GPT' to easily mass-produce malware and attempt cyber attacks.

Secondly, in the case of enterprise-customized hybrid environments, the complexity of security configuration and management areas increases the likelihood of security vulnerabilities.

Thirdly, data leaks involving personal or sensitive information were also cited as security threats. As data leak routes and attack methods diversify, leaked data is traded on the dark web, causing secondary damage.

Fourthly, as ransomware-as-a-service (RaaS) is commercialized and used in cybercrime, attacks utilizing Initial Access Brokers (IAB) are increasing. RaaS is ransomware provided as a service that allows ransomware attacks without programming expertise, requiring only payment.

Finally, with the acceleration of digital transformation in enterprises, work environments are expanding to cloud, mobile, etc., increasing the targets for hackers' attacks.

Byun Sang-kyung, Head of Security Technology at Samsung SDS (Executive Director), emphasized, "Security threats arising from complex work environments such as generative AI and cloud must be addressed from an enterprise-wide crisis management perspective," adding, "The adoption of zero-trust-based solutions and services to strengthen security is an essential element of corporate management."