Study warns cost-cutting use of generative AI could increase cyber-attack risks


Newly published research from a leading computer scientist warns that the use of generative AI to design, train, or perform steps within a machine learning system could increase serious risks. Michael Lones, professor at Heriot-Watt University’s School of Mathematical and Computer Sciences, has argued in a new paper that generative AI could expose organizations and the public to unintended harm.

These include cyber-attacks, data breaches, and bias against underrepresented groups, despite potential cost and efficiency benefits. Professor Lones’ study has been published in the journal Patterns and explores how generative AI is increasingly being used to design, build, and operate machine learning systems across a wide range of sectors.

Read more…
Source: Phys Org News


Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox


Related:

  • Government websites in Europe and elsewhere go dark as software flaw sparks security scramble

    October 21, 2026

    Government websites in Europe and elsewhere went offline on Wednesday after the disclosure of critical vulnerabilities in a widely used programming language sent website operators scrambling to protect their systems. Developers of the PHP programming language said Tuesday they had identified two critical vulnerabilities and urged users to update their sites as soon as a fix ...

  • Grocery giant Ahold Delhaize confirms cyberattack forced US and European systems offline

    October 19, 2026

    Dutch grocery giant Ahold Delhaize, which operates US supermarket chains Food Lion, Giant Food, and Stop & Shop, said it proactively took IT systems offline following a cyberattack, affecting most of its US and European brands. The multinational chain originally disclosed the incident on October 12. “Ahold Delhaize is experiencing a security issue within its network,” ...

  • Florida DMV hacked after police dept insecurely stored login info

    October 19, 2026

    The Florida Department of Highway Safety and Motor Vehicles (FLHSMV) has begun notifying victims impacted by a recent data breach of driver’s license and motor vehicle data, but not everyone whose information was stolen will receive an alert. In a notice posted Friday, FLHSMV confirmed that it took “immediate steps” after discovering that “a malicious actor ...

  • Millions of California students’ sensitive data stolen in breach

    October 19, 2026

    Personal information belonging to millions of current and former California public school students has been stolen from a system operated by Educational Testing Service (ETS). ETS is a nonprofit organization that helps run the state’s standardized tests under contract with the California Department of Education (CDE). It has begun notifying students and families after an unauthorized ...

  • A fake WatchGuard VPN site is stealing your passwords

    October 18, 2026

    A fraudulent WatchGuard download website stole VPN login details while supplying the authentic installation package, experts have claimed. Security investigators at Huntress traced the activity to a lookalike domain that collected connection details before downloading the legitimate client. The investigation began after suspicious activity involving an administrator working for a managed service provider was detected. Read more… Source:  TechRadar ...

  • GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

    October 16, 2026

    On October 12, 2026, GitLab released 19.4.2, 19.3.5, and 19.2.8 to fix CVE-2026-97229, an integer overflow in its CI/CD regular-expression handling. The issue was reported through HackerOne by joaxcar. GitLab assigned it a CVSS score of 10.0 and described possible code execution by an unauthenticated user. The advisory states that CVE-2026-97229 affects GitLab CE and EE ...