For transportation cybersecurity, AI isn’t helping fight..so far

At the National Motor Freight Transport Association’s cybersecurity conference, professionals in the freight industry gathered to discuss the ongoing battle against cyber threats. However, the focus on artificial intelligence (AI) as a tool to combat these threats was notably absent. In fact, the conference's advisory chief information security officer, James McQuiggan, emphasized that AI is increasingly being used by cybercriminals to facilitate attacks.

McQuiggan warned that cybercriminals are leveraging AI for malicious purposes, such as creating deepfakes that can manipulate voices and appearances. He also highlighted the potential for AI to create vulnerabilities within an organization's own systems, a phenomenon he termed "shadow AI." This refers to the unintended risks that can arise when employees use AI tools inappropriately, which can then be exploited by outside attackers.

During his presentation, McQuiggan underscored the importance of educating employees about the risks associated with AI usage in a corporate setting. He noted that internal users may inadvertently introduce vulnerabilities that could be exploited by outside attackers. Furthermore, McQuiggan pointed out that cybercriminals are now using AI to scrape information from various sources, such as LinkedIn profiles and company websites, in order to launch more sophisticated phishing campaigns.

The polished and grammatically correct nature of these communications, a result of advanced AI technology, makes them more convincing than the misspelled and poorly written emails of the past.

The conference also highlighted the increasing threat of ransomware attacks, which are being fully leveraged by AI. The potential financial impact of such attacks is significant, with cybercriminals reportedly investing up to $100,000 in deepfake campaigns and receiving ransom payments in the millions. The National Motor Freight Transport Association's (NMFTA) annual gathering, attended by industry professionals, government officials, and cybersecurity service providers, serves as a focal point for addressing these cyber threats in the freight industry.