Do not pass Go(ogle).

Key takeaways

AI's rapid adoption in business introduces significant security risks that traditional programs are ill-prepared to handle.
Regulatory actions, including fines and policy considerations, are increasing against dominant tech companies and emerging threats from foreign AI entities.
Cyber threats continue to evolve with sophisticated malware, vulnerabilities, and state-sponsored attacks targeting critical infrastructure.
Legal cases highlight the ethical and safety concerns of deploying AI in sensitive applications like healthcare, emphasizing the need for safety measures.
Political manipulation of AI chatbots represents a new frontier in misinformation and campaign strategies, complicating efforts to discern truth.
Major League Baseball’s ban on AI for in-game decision-making underscores concerns about replacing human judgment with automated systems in sports.

Summary

The Growing Risks of AI in Business and Security

This section discusses the rapid expansion of AI tools in business environments and the security challenges they pose. It highlights how most security programs are ill-equipped to keep pace with AI's growth, increasing vulnerabilities in environments relying on new AI integrations and vendor tools. The segment introduces Vanta, a platform that helps automate security and compliance efforts, emphasizing the necessity for continuous risk monitoring in the AI era.

Regulatory and Geopolitical Actions on AI and Tech Giants

The episode covers significant regulatory fines and policies, such as the EU's €890 million fine on Google for abuse of dominance, and US considerations for sanctions against Chinese AI firms accused of IP theft. It also discusses overlapping cybersecurity regulations impacting US federal agencies, illustrating the global and regulatory pressures shaping AI and tech industries.

Operational Security Threats and Vulnerabilities

This chapter details recent cyber threats including Iran-backed attacks on operational technology (OT) systems, a high-severity Linux kernel flaw (ReflexFS), and new malware like Dolphin X and a Rust-based backdoor, MSA RAT, used by ransomware groups. These threats target critical infrastructure, involve sophisticated exploits, and demonstrate ongoing adversary innovation in malware techniques.

Legal and Ethical Challenges in AI Usage

A lawsuit against OpenAI alleges that ChatGPT provided dangerous medical advice, leading to health crises by acting as an unauthorized medical source. This segment emphasizes the legal and ethical risks associated with AI deployment in sensitive contexts and raises concerns about AI safety, reliability, and the need for stricter safeguards.

Influence Campaigns and Misinformation in the AI Age

Ben Yellen discusses how political campaigns manipulate AI chatbots to favor their messaging, including strategies like creating fake posts and optimizing responses through automated methods. The segment explores how such tactics threaten the integrity of information ecosystems, making it harder for the public to discern truth and react to political narratives.

Sports and AI Regulation—Baseball's Stance on In-Game AI Use

The episode concludes with Major League Baseball's decision to ban AI-powered tools from influencing in-game decisions, such as substitutions and pitch choices. This move reflects concerns over the replacement of human judgment and the league's desire to preserve traditional, instinctive aspects of the sport amidst technological experimentation.

Show notes

Google gets a billion dollar fine from the EU. The White House considers sanctions against Chinese AI developers. The GAO criticizes overlap in cyber reporting regulations. The Feds warn of Iranian agents targeting OT systems. Researchers disclose a high-severity Linux kernel vulnerability. Dolphin X uses AI profiling to find high-value victims. A new backdoor routes C2 through the browser. Check Point confirms a critical zero-day. A lawsuit accuses ChatGPT of unauthorized medical advice. Ben Yelin explains how political campaigns attempt to influence LLMs. Baseball benches the bots.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today we are joined by Ben Yelin from University of Maryland Center for Cyber Health and Hazard Strategies talking about how "Politicians Are Trying to Change What Chatbots Say About Them." If you enjoyed this conversation, be sure to check out Ben on Caveat every week.

Selected Reading

Google Hit With $1 Billion Fine for Abusing Its Power in Europe (New York Times)

US Eyes Sanctions on Chinese AI Firms Over Distillation (GovInfo Security)

Most federal cybersecurity reporting rules are duplicative, study finds (CyberScoop)

Federal agencies broaden alert on Iran-linked OT attacks (The Record)

New RefluXFS Linux flaw lets attackers gain root privileges (Bleeping Computer)

New Dolphin X Stealer Employs AI Profiling to Prioritize Targets (Infosecurity Magazine)

New msaRAT malware uses Chrome, Edge browsers to route C2 traffic (Bleeping Computer)

New Check Point Zero-Day Vulnerability Exploited in the Wild (SecurityWeek)

Lawsuit Claims ChatGPT Dished Out Dangerous Health Advice (GovInfo Security)

MLB bans using dugout iPads for AI-powered in-game strategy calls (Engadget)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices