AI & Cybersecurity
What is the most commlly used AI tool worldwide?
Chat GPT/Open AI
What is spear phishing?
A targeted phishing attack aimed at a specific person or organization.
What is a deepfake?
AI-generated or manipulated audio, video, or images that appear real.
What is the difference between MFA and 2FA
MFA requires two or more authentication factors. 2FA requires exactly two authentication factors.
All 2FA is MFA. Not all MFA is 2FA.
What is PII?
Personally Identifiable Information
Name one red flag in a phishing email.
Urgency, suspicious links, unexpected attachments, spelling errors.
Name one sign a video or audio recording could be a deepfake.
Unnatural movements, odd voice patterns, inconsistent details.
Why is it important to NOT reuse passwords?
Limits damage if one account is compromised.
What cybersecurity risk is created when employees enter confidential company information into public AI tools?
Data leakage (or data exposure)
You receive an email saying your password expires in 15 minutes. What's your first action?
Be cautious/suspicious
Report as phishing
Why are deepfakes a risk to organizations?
Fraud, impersonation, misinformation, and social engineering.
You find a brand-new Instagram account selling the latest iPhone for 80% off, but it requires payment through a gift card or cryptocurrency. What's the biggest red flag?
It's deal that's too good to be true.
What is the term for when an AI system confidently provides false or fabricated information?
AI Hallucination
An email appears to come from your manager, but the sender's email address is slightly misspelled. What type of attack is this?
Email spoofing
A phone call from someone pretending to be IT support and asking for your password is an example of what type of attack?
Vishing, voice phishing
What are three features of a strong password?
Length, complexity/randomness, and uniqueness
What is the most effective defense against AI-powered social engineering attacks?
Verification via known channels
An attacker sends a phishing email that does not contain a malicious link or attachment. How can the attack still succeed?
By tricking the recipient into replying with sensitive information or taking an action on the attacker's behalf.
What is social engineering?
When an attacker gathers information about you from sources like Instagram, LinkedIn, etc. before launching a targeted attack
You receive an MFA prompt on your phone but are not attempting to log in. What should you do?
Deny the request and report it