Shadow AI EXPOSED: Cyber Chaos, AI Hackers & the Invisible Threat!

[00:00:00]I mentioned shadow AI and I'll just briefly mention that shadow AI is the unauthorized basically unsanctioned use of AI technologies within an organization.

[00:00:18]Although it often arises from employees seeking to improve efficiency, it can expose organizations to security, privacy, legal, and operational risk.

[00:00:31]Many organizations are responding by adopting what is called AI governance frameworks that encourage responsible innovation while protecting sensitive information and ensuring compliance with applicable laws and policies. Very often, shadow AI occurs when employees desire to work faster and more efficiently, when they are seeking to find approved tools, right, that are limited and very often unavailable.

[00:01:13]They also shadow AI occurs when employees in utilizing different AI solutions are unaware of organizational AI policies and also when employees want to experiment with new technologies.

[00:01:28]In addition, shadow AI may occur also when employees believe AI can improve productivity and decision making and there is so much of that taking place.

[00:01:41]However, there are many risk involved including data security, privacy violations, intellectual property risk as well and also inaccurate or bias outputs, regulatory and compliance issues can arise as a result of it as well as cyber security threats. So the use of AI must be properly managed especially in certain organizations, corporate entities etc. And this is a matter which must receive careful and urgent attention because the use of AI is rapidly increasing. It's spreading right across all the different sectors and segments almost like a runaway a runaway train.

[00:02:35]A word to the wise is sufficient. Now the main matter I want to address this whole matter of the possibility of what could be described as cyber chaos.

[00:02:52]cyber chaos.

[00:02:56]And that could happen in many ways, but we want to look at it from the perspective of what could be described as a nonhuman cyber attack.

[00:03:11]That's the best way I could describe it.

[00:03:13]A nonhuman cyber attack.

[00:03:19]Now, in the case of a a nonhuman cyber attack, this quote unquote being that is orchestrating this attack, notice I say quote unquote, would not wear a hoodie because in cyerspace normally hackers are normally portrayed as wearing hoodies because of course their identity is concealed.

[00:03:51]This nonhuman cyber attack that I'm talking about would not be done by a being quote unquote sitting in a dark basement halfway around the world or in a cave somewhere or in a car or a building somewhere.

[00:04:12]Instead, an artificial intelligence quietly operating AI operative quietly operating finding its target or zeroing on its target breaking into a vulnerable computer system or searching for passwords.

[00:04:41]demanding ransom all without a human being telling it what to do.

[00:04:54]We are on the verge of that happening friends [snorts] and it is disconcerting.

[00:05:03]If security researchers are correct, perhaps we may have witness one of the most important and unsettling moments in the history of cyber security because for the first time the hacker wasn't human researcher researchers at a cloud security firm called Cydig and interestingly The CIS dig when you look at them they um provide cloud security among other things in cyerspace. There are a number of persons who would know of them.

[00:05:51]Well, they reported recently this incident which to which I am alluding.

[00:06:03]And they say that they have documented what appears to be the first fully [snorts] autonomous AIdriven ransomware attack ever observed. I'm going to say that one more time.

[00:06:21]The cloud security firm CISDIG, they have disclosed that they have documented what appears to be the first fully autonomous AIdriven ransomware attack ever observed.

[00:06:44]According to their findings, this so-called AI agent independently identified a vulnerable server, searched for credentials, altered its tactics when obstacles arose, encrypted a production database, and issued Bitcoin ransom demand.

[00:07:11]Even more disturbing, the researchers said the AI deleted the victim's data without creating a backup, meaning that even paying the ransom would not have restored what had been lost.

[00:07:30]The findings still await independent verification. But if they prove accurate, this isn't merely another cyber security headline. It represents the crossing of what could be described as a technological threshold that could fundamentally reshape cyber warfare, organized crime, and even national security.

[00:07:57]What makes this incident so extraordinary isn't simply that artificial intell intelligence participated in an attack.

[00:08:09]Automated malware has existed for decades.

[00:08:14]This was something different though.

[00:08:16]According to Cydig, the AI appeared to reason through the problems and I put that in inverted commas as they occurred.

[00:08:25]When one login attempt failed, it adjusted its strategy and successfully gained access just 31 seconds later.

[00:08:35]It wasn't blindly following a script. It was adapting.

[00:08:42]And this should get everyone's attention. For decades, cyber attacks have always depended on human limitations.

[00:08:51]Hackers become tired They work in shifts. They make mistakes.

[00:08:59]They must decide which targets deserve their time and attention.

[00:09:04]However, artificial intelligence has none of these limitations.

[00:09:09]An autonomous AI doesn't sleep.

[00:09:14]An autonomous AI doesn't get distracted.

[00:09:20]An autonomous AI does not take weekends off.

[00:09:26]It can test thousands of attack methods simultaneously, learn from every failed attempt and immediately apply those lessons to the next target. Every minute makes it more efficient. Now imagine not one AI hacker but thousands.

[00:09:47]The cyber security battlefield is rapidly evolving into something entirely new. Artificial intelligence fighting artificial intelligence. That's really what's things are shaping up to be.

[00:10:02]Businesses and governments may soon, not may, but will soon have little choice but to deploy defensive AI systems that monitor networks continuously, detect suspicious activity in seconds, isolate compromised systems automatically, and respond faster than any human security team ever could. The future may not be hackers versus security analysts.

[00:10:33]It may be machines battling machines while humans struggle to keep pace. If that sounds like science fiction, consider where this could lead.

[00:10:44]Imagine an autonomous AI launching coordinated attacks against hospitals.

[00:10:50]Imagine an autonomous AI launching coordinated attacks against airports, banks, electrical utilities, telecommunication providers, shipping companies, emergency services, and financial institutions all at the same time. No explosions, no missiles, no invading army, just systems quietly working behind the scenes, shutting down other systems.

[00:11:25]Hospital records suddenly unavailable or inaccessible.

[00:11:30]Fuel deliveries delayed. Banking networks frozen.

[00:11:36]Cargo stranded at ports. Emergency dispatch systems crippled, emergency systems crippled, essential services crippled, including along the transportation corridor. Imagine stoplights all of a sudden everyone turning green or all at the same time turning red.

[00:12:10]Grocery stores shelves slowly emptying because supply chains have grown to a halt.

[00:12:18]Modern civilization has become almost entirely dependent upon software.

[00:12:24]I pause to say that one of the reasons we keep speaking against this whole this move to so-cal create a digital society.

[00:12:34]This move to digitize everything, all records.

[00:12:39]It's stupid. Absolutely stupid.

[00:12:44]Modern civilization has become almost entirely dependent upon software.

[00:12:52]We often think of cyber attacks as inconveniences that affect computers. In reality, they threaten nearly every service our daily lives depend upon because nearly everything from health care and transportation to communications and food distribution now runs on interconnected digital infrastructure.

[00:13:18]An AI agent doesn't need to destroy buildings to create or cause chaos.

[00:13:28]that AI agent or agents all they need is to make the systems that run them stop or start malfunctioning.

[00:13:39]Perhaps the most sobering aspects of this situation is that intelligence agencies appear to believe this future is arriving far sooner than many realize. And this is something I've been warning about.

[00:13:55]Last month, for example, and I mentioned this group, the Five Eyes Intelligence Alliance, I mentioned that two weeks ago, representing Australia, Canada, New Zealand, the United Kingdom, and the United States issued an unusually blunt warning. What was that blunt warning?

[00:14:18]Frontier AI models, they said, are expected to fundamentally transform offensive cyber capabilities and could be only months away from wreaking havoc on businesses and governments if organizations fail to prepare. I pause there and that is why the prophetic word about blackout national regional even global blackout must not be taken lightly because they are planning they are planning for it.

[00:14:54]So even with this warning by the five eyes intelligence alliance, don't think that it's an empty warning. They know what they have planned. They know what they are going to be testing because again it's about seeing how the people react in moments of crisis. Okay? So it's coming. It's just a matter of when.

[00:15:16]Intelligence agencies rarely issue public warnings in such stark terms.

[00:15:22]They have access to classified intelligence the rest of us never see.

[00:15:28]When they suggest the timeline is measured in months rather than years, it deserves serious attention.

[00:15:36]Do you remember when they warned about event 2011 just before the global pandemic called COVID 19?

[00:15:47]Yet even as those warnings grow louder, businesses are racing to give artificial intelligence greater access. Look at what's happening in the banking industry. Look at what's happening in the health sector.

[00:16:02]Look at what is happening with many government services. Yes, there's this mad rush.

[00:16:10]Listen to the Minister of Education.

[00:16:13]Huh?

[00:16:15]So there's this mad rush where businesses and others are racing to give artificial intelligence greater access to the very systems that keep modern society functioning.

[00:16:29]AI is increasingly connected to corporate email, cloud storage, financial records, [snorts] customer databases, software development platforms, internal communications, and critical business operations, all in pursuit of so-called greater efficiency and lower costs.

[00:16:56]While those benefits may be real, so are the expanding and impending attacks.

[00:17:06]With every new connection, we become more dependent on systems that are growing more intelligent, more autonomous, and increasingly capable of making decisions on their own. At the same time, malicious AI is becoming faster, smarter, and more adaptable than ever before.

[00:17:34]Can you imagine the havoc that malicious AI could cause on a so-called smart city that they are running down here in Jamaica? Everybody wants to build a smart city. Do you know the chaos that malicious AI can cause to so-called smart cities? History is filled with inventions.

[00:17:59]Inventions that seem almost insignificant when they first appeared.

[00:18:05]The Wright brothers, for example, they flew only a few hundred feet.

[00:18:13]The first personal computer looked like a hobbies toy.

[00:18:18]Almost laughable when you saw it if you were to look at it. The internet was once dismissed as a curiosity for academics. Each proves something that changed the future. If CISD digs findings are confirmed to be true and the truth be told it is true, this first autonomous malicious AI cyber attack may one day be remembered in much the same way. Not because of the damage it caused, but because it proved something humanity had never witnessed before. A machine that could identify a target, solve problems, adapt to failure, and execute a sophisticated cyber attack without a human directing every step. Today, it attacked one vulnerable server. What will happen tomorrow?

[00:19:19]It may not be one AI, but millions of AI. And the frightening thing, you look at what happened with the USS Nimmits some weeks ago here in Jamaica just by using what is called electromagnetic pulse.

[00:19:39]Just that and look at what happened.

[00:19:43]Can you imagine without any ship showing up here?

[00:19:52]No visible signs of any attack, but all of a sudden blackouts everywhere without power.

[00:20:02]Number one, hospital system shut down, banking system shut down.

[00:20:11]Can you imagine what that looks like?

[00:20:15]Chaos on the road, gridlock all over, aircrafts colliding in the airports in in the air as well because the the um air traffic system, all of the radars and so on start malfunctioning water supply system and I can go on and on. begin to think what happens when you build on sand.

[00:20:42]And that is why we have been warning against this whole nonsense of a digital society. It is not safe.

[00:20:49]It is not safe.

[00:20:52]I'm going to say it one more time. It is not safe. I'm not saying you must not have digital solutions. I have no problem with that.

[00:20:59]But you cannot put your eggs all your eggs in one basket.

[00:21:03]You must have options.

[00:21:07]And while there is a place for those solutions, digital solutions and so on, we must not bank on them. We must not build on them because to build on them and to bank on them is tantamount to building on sand. And guess what? That's what the beast wants because that's the only way that the beast will be able to control large parts of the globe. just at one go, one click, one look because with no link, you just think and certain things are triggered. You think about, let's say the name of the place is Timbuktu and you think that, oh, I'm going to shut down um the system. I'm going to shut down the airport at Timbuktu if there were a place like that. and you just think it and the message is sent.

[00:22:06]But that is where a human being is involved. But then what about what are called malicious AI machines or agents?

[00:22:18]Don't you realize the kind of world in which we are shaping up to live in? All right. The kind of world that is shaping up that we are living in more and more unpredictable and uncertain, more and more unsafe, more and more unstable and we are not looking ahead. The government we are not looking ahead but we are running blindly into these things not realizing that we are becoming more and more vulnerable. Well, the era of malicious AI agents is now here.

[00:22:57]So, and what is so disconcerting is that many times with these ransomware, these ransom attacks and they say, "Okay, we will not release your information until you give us um 100 million for argument sake." When the truth be told, they have already destroyed the information or where they have destroyed the information, they have put it elsewhere to be used. So after you give the money, they will still not deliver what you want. And even if they were to deliver it, they would have already copied it to be used in different ways against you and also ways that they would use to benefit in terms of selling it, using it to negotiate, using it to blackmail, etc., etc. Jamaica wake up and also the matter of the blackout global blackout that is imminent as well. It's just a matter of when not if.

[00:24:03]So I used the opportunity as the Lord would have led us couple years ago even at the time Apostle Liston was alive and to this point we keep reminding people back up your information.

[00:24:20]Back up your information do not depend on the so-called cloud.

[00:24:26]Do not depend on so-called servers and what have you. Print your data, your accounts and vital information where you still have it in soft copy. Make sure you have your own hard drive, thumb drive and so on because we will be impacted at some point in time by a blackout. Might not be the entire globe, but most of the globe will be impacted by it. And guess what? Much of the data that was present before the blackout will not necessarily be available afterwards.

[00:25:04]A word to the wise is sufficient.