A fifth (20%) of organisations admit that an employee at their company has exposed company data using AI tools such as ChatGPT, according to new research from cybersecurity provider RiverSafe.

A survey of 250 UK CISOs conducted by Censuswide detailed the intersection of AI tools and cybersecurity.

RiverSafe found that three quarters (75%) of security leaders believe that insider threats pose a more significant risk than external threats to their organisation’s cybersecurity.

On top of this, one in five (20%) identified AI as their biggest cybersecurity threat, pointing to more concerns over AI’s potential misuse in cyber-attacks.

These findings, revealed in RiverSafe’s report Underfunded and Under Reported: Threats Breaches and Budgets, spotlight the inherent risks associated with increasing insider threats and suspicion towards employee-led security concerns within organisations.

The exposure of data by insiders poses a profound danger, surpassing the threat posed by external actors.

Additionally, the escalating sophistication and prevalence of AI tools introduces new complexities and vulnerabilities, contributing to the ever-evolving landscape of cyber-threats.

“Our research has highlighted the prominent danger that insider threats are posing to businesses, both by unaware employees and malicious staff members,” CEO at RiverSafe Suid Adeyanju said. “This report sheds light on the intersection of AI and insider threats, where the increasing use of AI creates a wider concern for the potential for data breaches.”

“As the complexity of AI-Driven cyber threats continue to evolve, proactive measures are essential to safeguard sensitive data assets and mitigate the risks posed by insider threats. A revised and up-to-date cyber strategy should no longer be a second thought, but instead a priority for all organisations to mitigate the risks, especially when considering ever increasing use of AI.”

Recommended reading

• Two Thirds of Internet Traffic is Now Made Up of Bots
• 92% of Enterprise Devices Unprepared for AI Security Challenges
• 75% of UK Businesses Failing to Uphold Cybersecurity Best Practices

Oseloka Obiora, CTO at RiverSafe, commented: “Although AI presents enticing opportunities for businesses, it’s imperative to proceed cautiously, particularly concerning insider threats and data breaches originating from employees.

“Organisations must leverage AI for competitive advantage while strengthening cybersecurity defences to prevent potential vulnerabilities. The repercussions of a breach, compromising both customer and employee data, can inflict irreparable damage, underscoring the critical importance of comprehensive security measures.”