AI-Driven Social Engineering Threatens Service Desks

Recent findings indicate that 16% of data breaches involve AI tools, primarily for phishing and impersonation attacks. Service desks are particularly vulnerable as attackers can exploit social engineering tactics to gain unauthorized access. New employees, unfamiliar to IT teams, are at heightened risk during onboarding. High-profile incidents at companies like M&S and MGM Resorts began with simple requests for access. AI enhances the sophistication of these attacks, enabling the creation of convincing emails, chat messages, and even voice or video impersonations. The availability of personal information online allows attackers to craft believable narratives, making malicious requests appear routine. Organizations must implement stronger identity verification processes to combat these threats. The situation calls for immediate attention from security teams to safeguard sensitive information.

Key Points: • 16% of data breaches involve AI tools for phishing and impersonation. • Service desks are prime targets for social engineering attacks. • AI enables attackers to create convincing impersonation tactics.