{"id":9280,"date":"2025-10-07T12:59:28","date_gmt":"2025-10-07T10:59:28","guid":{"rendered":"https:\/\/the-s-unit.nl\/?p=9280"},"modified":"2025-10-07T19:43:03","modified_gmt":"2025-10-07T17:43:03","slug":"generatieve-ai-als-nieuw-aanvalsvlak","status":"publish","type":"post","link":"https:\/\/the-s-unit.nl\/en\/generatieve-ai-als-nieuw-aanvalsvlak\/","title":{"rendered":"Facing AI-driven attacks: facts, risks and practical steps to prepare your organisation"},"content":{"rendered":"
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t\t
<\/div>\n\t\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Facing AI-driven attacks: facts, risks and practical steps to prepare your organisation<\/span><\/b><\/span><\/p><\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Imagine this: you receive a call from your managing director urgently asking you to transfer money. The voice sounds familiar, but it\u2019s not your director. It\u2019s an AI-generated deepfake. Would you fall for it?<\/strong><\/p>

Generative AI (GenAI) is evolving at a rapid pace. Businesses are using the technology to create content, speed up processes and serve customers more effectively. But the same innovations are also being exploited by cybercriminals.<\/span><\/p>

And it's moving fast: According to a recent survey by Gartner<\/a> It appears that the number of cyberattacks using generative AI (GenAI) is increasing significantly. Nearly one in three organisations reported an attack on the infrastructure of their GenAI applications in the past 12 months. In addition, more than six in ten organisations said they had been confronted with deepfakes used for fraud or deception.<\/p>

This shows that the threat is not a vision of the future but a reality today. For The S-Unit, it confirms what we already observe in practice: organisations are increasingly facing attacks that have become smarter, faster and more convincing through the use of generative AI.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

How generative AI is changing attack methods<\/h4>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

The rise of generative AI is expanding the attack surface in several ways.<\/p>\n

    \n
  • Deepfakes and synthetic content<\/strong>
    Where we once mainly warned against poorly written phishing emails, we now face audio and video files that are almost indistinguishable from the real thing. A fraudster can create a convincing video of a CEO urgently demanding a payment, or mimic a manager\u2019s voice in a phone call. For employees, it is almost impossible to recognise this without proper training or tools.<\/li>\n
  • Manipulation of AI models<\/strong>
    Attackers know exactly how to manipulate AI. Through clever and often subtle alterations of prompts or input data, they can twist systems into something no longer reliable. The output can suddenly become misleading, biased or even harmful. For organisations that use AI in customer service, financial processes or decision-making, this poses a significant risk.<\/li>\n
  • AI accelerated phishing<\/strong>
    Phishing emails full of spelling mistakes? That\u2019s a thing of the past. With the rise of generative AI, cybercriminals can now produce flawless, persuasive and even personalised messages, faster and in greater numbers. Emails and chats so convincing that employees can hardly tell them apart from legitimate communication. The result: the likelihood of someone falling for them is increasing rapidly.<\/li>\n
  • Attacks on the AI infrastructure itself<\/strong>
    It\u2019s not just the output that\u2019s vulnerable: the underlying models, APIs and cloud environments have also become targets. An attack on these can lead to data breaches, downtime or unauthorised access to sensitive information.<\/li>\n<\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t
    \n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t

    Why quick fixes don\u2019t solve AI security risks<\/h4>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    Many organisations respond instinctively: purchasing a new product, installing a quick tool or setting up an isolated protocol. But as Gartner analysts emphasise, a rushed approach is often ineffective. The reality is that GenAI risks are not separate from existing threats. They represent an evolution of familiar attacks like phishing, social engineering and manipulation, now amplified by AI.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

    \n\t\t\t\t
    \n\t\t\t\t\t\n\t\t\n\t\t
    \n\n\t\t\t\n\t\t\t\t
    \n\n\t\t\t\t\t\t\t\t\t\t\t
    \n\t\t\t\t\t\t\t<\/svg>\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\n\t\t\t\t\t
    \n\n\t\t\t\t\t\t\n\t\t\t\t\t\t
    \n\t\t\t\t\t\t\t
    \n\t\t\t\t\t\t\t\tA solid defence must therefore be balanced: securing the fundamentals, understanding new threats and taking targeted measures in response.\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t\"Linda\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\n\n\t\t\t\t\t\t\t
    \n\t\t\t\t\t\t\t\t

    \n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\tLinda van Ruth\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t

    \n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\tCCO The S-Unit\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/h4>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t\t
    \n\t\t\t\t\t\t\t<\/svg>\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t
    \n\t\t\t
    <\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t
    \n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t

    Practical steps to strengthen your cyber resilience<\/h4>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    At The S-Unit, we believe in pragmatic, achievable steps. Organisations don\u2019t have to do everything at once, but they can start building resilience today.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t
    Strengthen the foundation<\/strong><\/h5>

    The fundamentals of cybersecurity remain crucial.<\/span><\/p>

    • Strong authentication<\/strong>: Multi-factor authentication (MFA) is essential. AI makes identity fraud easier, so additional layers of verification are crucial.<\/li>
    • Networksegmentation<\/strong>: By separating systems, you prevent a successful attack from spreading immediately.<\/li>
    • Monitoring & detection<\/strong>: AI-driven attacks are often subtle. Continuous monitoring with anomaly detection tools helps to quickly identify irregularities.<\/li><\/ul>
      Increase knowledge and awareness<\/strong><\/h5>

      Seventy per cent of IT security incidents are caused by employees themselves. They might click on a link in a phishing email, download unsafe software or share (confidential) information with people outside the organisation. They are often insufficiently aware of their role, and cybercriminals exploit this. So, what can organisations do?<\/p>

      • Training in AI threats<\/strong>: Employees need to know that deepfakes exist, how convincing they can be, and how to recognise the warning signs through awareness training.<\/li>
      • AI literacy<\/strong>: Establish clear policies for the use of GenAI, including which applications are permitted or prohibited, and how employees should handle output and data responsibly.<\/li>
      • Simulations and exercises<\/strong>: Just like phishing tests, deepfake or AI attack simulations can help organisations increase their alertness.<\/li><\/ul>
        Integrate AI-specific security measures<\/strong><\/h5>

        Generative AI requires additional measures.<\/p>

        • Security by design<\/strong>: Work with developers to ensure security is built into AI applications from the start. Adding it afterwards is more costly and less effective.<\/li>
        • Specific detectiontools<\/strong>: Invest in solutions that can detect anomalies in AI output, such as manipulated prompts or suspicious synthetic content.<\/li>
        • Collaboration & sharing knowledge<\/strong>: Share experiences with partners and industry peers. AI attacks are new territory, and learning progresses faster through knowledge exchange.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
          \n\t\t\t\t
          \n\t\t\t\t\t\t\t
          \n\t\t\t
          <\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
          \n\t\t\t\t\t\t
          \n\t\t\t\t\t
          \n\t\t\t
          \n\t\t\t\t\t\t
          \n\t\t\t\t
          \n\t\t\t\t\t\t\t
          \n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
          \n\t\t\t\t
          \n\t\t\t\t\t

          AI: opportunity and challenge<\/h4>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
          \n\t\t\t\t\t\t
          \n\t\t\t\t\t
          \n\t\t\t
          \n\t\t\t\t\t\t
          \n\t\t\t\t
          \n\t\t\t\t\t\t\t\t\t

          Generative AI is here to stay. In fact, it\u2019s becoming increasingly integrated into the way we work and communicate. The key is to harness its potential while staying aware of the risks.<\/p>

          Our vision at The S-Unit is that digital resilience starts with trust, insight and collaboration. We aim not only to protect organisations against today\u2019s threats, but also to prepare them for the challenges of tomorrow.<\/p>

          Our advice:<\/strong><\/p>

          • Take facts seriously<\/strong>: Attacks using GenAI are not a hype but a reality.<\/li>
          • Innovate responsibly<\/strong>: Implement a sandbox in which GenAI can be handled safely.<\/li>
          • Proactive approach<\/strong>: Don\u2019t wait for an incident to occur. Take action now, for example by using monitoring tools designed to detect irregular AI activity.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
            \n\t\t\t\t
            \n\t\t\t\t\t\t\t
            \n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
            \n\t\t\t\t\t\t
            \n\t\t\t\t\t
            \n\t\t\t
            \n\t\t\t\t\t\t
            \n\t\t\t\t
            \n\t\t\t\t\t\t\t
            \n\t\t\t
            <\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
            \n\t\t\t\t
            \n\t\t\t\t\t\t\t\t\t

            The question isn\u2019t whether AI will be used against your organisation, but when. Deepfakes, AI manipulation and AI-accelerated phishing are making the threat landscape more complex than ever. Yet there\u2019s good news: with a layered defence, informed teams and security built into AI from the start, you\u2019ll take a strong step towards securing your digital future.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

            \n\t\t\t\t
            \n\t\t\t\t\t\t\t\t\t

            AI-driven attacks won\u2019t stop at the door. Find out how resilient your team is. We\u2019re happy to help! <\/strong><\/p>

            Speak to our experts for more information. <\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

            \n\t\t\t\t
            \n\t\t\t\t\t\t\t
            \n\t\t\t
            <\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"

            Generatieve AI als nieuw aanvalsvlak: feiten, risico\u2019s en wat organisaties nu al kunnen doen. Stel je voor: je krijgt een telefoontje van je directeur die je dringend vraagt geld over te maken. Zijn stem klinkt vertrouwd. Maar het is niet jouw directeur. Het is een door AI gegenereerde deepfake. Trap jij erin? Generatieve AI (GenAI) […]<\/p>\n","protected":false},"author":17,"featured_media":9288,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"elementor_header_footer","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-9280","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blogs"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t