The proliferation of AI tools into the workplace has led to many benefits for organizations but it also comes with several risks. As these tools continue to gain in popularity, it is important for users to be knowledgeable of security risks, cautious when it comes to entering both personal and professional data, and skeptical of instructions and output found online. In this month’s newsletter we’ll discuss key factors and tips for making sure your organization’s AI use is safe and secure.
Smart Searching
AI has transformed the way search engines and websites operate. Services have now integrated AI results to provide summaries that provide users with the answers they are looking for quickly and efficiently. Unfortunately, cyber criminals are also making use of this technology in their attacks. Generative AI is being used to create believable phishing emails, fake websites, and even deepfakes that mimic real people with videos and audio. Gone are the days of obvious grammar and spelling mistakes being enough of a red flag to alert you to a potential scam.
This change means that it is more important than ever to be vigilant when reading email, searching for resources online, or just scrolling your social media feeds. You should be skeptical of content you see online, especially when it involves login information, financial systems, and confidential data.
Keep the following tips in mind:
- Hover before you click – check link destinations before clicking to confirm legitimacy, even when received from a trusted sender
- Question urgency – legitimate requests allow time for verification while urgency is a manipulation tactic
- Never share login information – legitimate requests will never ask you for passwords, MFA codes or other login information
Use Caution When Prompting
One of the risks associated with AI is that with so many tools it is hard to be informed of each one’s security and privacy policy. That is why it is important to be mindful of the information you are entering. Ensure it is not confidential or proprietary in nature. There have been many examples of industry data leaking to the public because it was entered into an AI toolset.
It is also important to be familiar with your organization’s AI-use policy (or to develop one if it doesn’t exist). Which tools are permitted? What training is in place to ensure users understand how to securely make use of these? How is data security enforced? These are all important questions that need clearly defined answers.
Common Scam Tactics
The floodgates have opened on generative AI, and cyber criminals are making extensive use of this in their attack efforts. It is important to be aware of common tactics being used today. Below are just a few examples of attacks we are seeing increase in frequency:
-
Fake websites. AI is allowing cyber criminals to create fake websites extremely quickly that mimic legitimate websites. With branded assets, professional design, and flawless grammar, these websites can be very deceiving to the untrained eye. These are being used for malicious purposes including: fake log in pages that steal credentials, offer file downloads that contain malware, and instruction or tutorial pages that trick users into installing software or running commands that grant attackers access to your devices.
-
Deepfakes. This technology is trained using videos, photos, and voice recordings of real people to create a bot that takes on that person’s appearance. While celebrities and famous figures are the most commonly used, attackers can use publicly available info from social media to mimic important figures in your organization or your personal life to try and trick you. These deepfakes improve the believability of their attacks, and when combined with social engineering methods (read our previous newsletter to learn more) these attacks can be amongst the most effective.
-
Document and Business Email Compromise (BEC) scams. Attackers who can compromise an account then use the email to target all its known contacts, taking advantage of the trusted relationship to trick further victims. Generative AI can then be used to draft emails and create documents for further damage, such as credential stealing, banking/payroll fraud, and installation of malware.
This list is not comprehensive, but highlights some of the real, growing attacks that occur daily. Remember to always remain skeptical of content you interact with online, and when receiving an unexpected call or email to stop, look, and think. When in doubt, report the activity to your IT.
www.csolve.ca | salesdesk@csolve.ca | 1.877.567.6593
Waypoint’s “An Evening to Shine the Light” fundraising event is happening on Friday, November 6 at the Midland Cultural Centre. Featuring an evening of music, meaning, and giving back, it will be one to remember! The event supports Waypoint’s mental health, addiction, and women’s programs.
Tickets are available now with the silent auction running until November 8th at 7:00PM. Learn more: An Evening to Shine the Light | Waypoint
Each November, Movember raises awareness and funds for men’s health, with a focus on mental health, suicide prevention, prostate cancer, and testicular cancer. Whether you grow a moustache, get active, or start a conversation, every action helps challenge stigma and encourages men to take charge of their health.
Learn more about this important cause and how to get involved: Movember 2026
Thank you for reading this month’s CSOLVE newsletter. Stay tuned for more technology insights, community updates, and ways we can help your organization work smarter.