eye_tracking
At a glance
Calculating...
Artificial intelligence (AI) is making cyber attacks easier, faster and more convincing. Cybercriminals may use AI to rapidly discover and exploit vulnerabilities, especially in websites. They can use AI to target many systems at once and rapidly progress an attack from initial compromise to data theft or extortion. This guidance is for small business owners and staff who want to better protect their systems, data and customers from AI-enabled cyber threats. It provides practical cyber security advice they can implement to reduce risk and improve resilience.
Recommended actions for small businesses
- Share this publication within your business to raise their awareness of AI-enabled cyber attacks.
- Turn off your websites that you no longer need, and disable features that you don’t need for your remaining websites.
- Turn on automatic security patches/updates for computers, tablets and mobile phones used by employees, especially for web browsers and operating systems.
- Review which companies you use to store and share your customer data and other sensitive data, and consider changing if they don’t take cyber security seriously. [1]
- If your business develops software, especially for websites, use a process for quality assurance including scanning your developed software for vulnerabilities.
- Identify a person or service provider that is responsible for maintaining the cyber security of your websites.
Ask the cyber security maintainer of your websites
- Is the software used by my websites supported by vendors that provide security patches/updates? If not, can you replace it with software that is?
- Are all security patches/updates applied to the software used by my websites, automatic or rapidly applied after becoming available?
- Is the software used by my websites made by a reputable company, and securely configured to disable unnecessary functionality and insecure settings?
- If my websites get hacked, how quickly would you notice and inform me, and can you fix the issue, evict the hacker, and restore from a recent secure backup?