AI Accelerators in Devices Present Significant Cybersecurity Risks

Security researchers have identified vulnerabilities in AI accelerators used in smartphones and connected devices, potentially affecting over 100 million devices. A study from NYU and UC Santa Barbara revealed that six out of seven tested AI chips could be exploited to perform unauthorized privileged operations. This type of attack, known as 'confused deputy attacks', bypasses traditional OS security controls. Recent vulnerabilities in Qualcomm and AMD chips further exacerbate the issue, allowing attackers to access sensitive data and control devices. The shift of AI processing from cloud to local devices increases the attack surface. Additionally, Google reported the first confirmed AI-assisted zero-day exploit in real-world attacks. The 2026 Verizon Data Breach Investigations Report indicates that vulnerability exploitation is now the leading cause of breaches, surpassing stolen credentials. Many organizations are still underestimating the risks associated with AI hardware.

Key Points: • Vulnerabilities in AI accelerators could affect over 100 million devices. • Confused deputy attacks exploit AI chips, bypassing traditional security controls. • Vulnerability exploitation is now the leading cause of security breaches.