Organisations fear AI-driven cyberattacks, but lack key defences

December 2024 Information Security, News & Events, Training & Education

A recent Kaspersky study reveals that businesses are increasingly worried about the growing use of artificial intelligence (AI) in cyberattacks. According to the findings, 56% of surveyed companies in South Africa reported a rise in cyber incidents over the past year, with almost half of respondents (47%) noting that many of these attacks were likely AI-driven.

The study underscores the reality that AI, which has revolutionised numerous industries, is now also empowering cybercriminals, adding an additional layer of complexity to the threats businesses face.

In its latest study titled Cyber defence & AI: Are you ready to protect your organisation? Kaspersky gathered the opinions of IT Security and Information Security professionals working for SMEs and Enterprise-level companies regarding new challenges in protecting their organisations against cyberattacks involving AI.

Leveraging AI by cybercriminals is a serious concern for 76% of respondents from South Africa. The pressure of this challenge is pushing companies to re-assess their cybersecurity strategies and look for proactive and comprehensive solutions. To effectively tackle AI-amplified threats, businesses in South Africa consider regular training to build internal expertise (98%), highly qualified personnel (98%), and relevant external cybersecurity expertise (98%) as the most important factors for protecting their organisations. They also recognise the importance of having enough staff in their IT teams (96%) and using third-party security solutions (91%).

Despite rising awareness, the study reveals a concerning gap in readiness among many companies. Just under half of the organisations surveyed in South Africa lack crucial resources needed to address these sophisticated threats – 44% do not have the relevant external cybersecurity expertise at their disposal, 38% report that their IT teams are not large enough, 36% lack highly qualified staff, and 31% fall short in regular training efforts.

Additionally, 42% of respondents do not think they have adequate security solutions, exposing them to potential vulnerabilities. While most respondents claim to know how to address this lack of resources, the fact remains that they are not in place.

“The cybersecurity landscape today mirrors past challenges, with businesses questioning if current solutions suffice. Ransomware, once a primary threat, now demonstrates a dangerous surge, and business decision-makers start questioning the causes of this resurgence. The recent hype around AI offers an easy, if not entirely correct, explanation. In reality, while using AI to create convincing phishing messages or more effective reconnaissance may be of some help, the root causes are most often more straightforward; cybercriminals have become more organised, better at collaborating, developing innovative attack strategies, and lowering the barriers for less skilled and resourceful attackers.”

“So, while it is useful to keep an eye on AI progress that can enable both attackers and defenders with new options, there are solid strategies companies can – and should – implement immediately. Companies should prioritise securing critical IT infrastructure with robust, multi-layered solutions that offer a unified security context. An XDR ecosystem, combined with skilled expertise – whether in-house or through a managed service – can greatly enhance defences.

Additionally, ongoing employee training, including cybersecurity basics and safe AI practices, adds another critical layer of protection for the organisation,” says Oleg Gorobets, a corporate infrastructure protection expert at Kaspersky.




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Cybersecurity needs actual intelligence before artificial intelligence
Information Security AI & Data Analytics
Cybersecurity depends on interpretation. A tool can tell you that something unusual has happened, but people need to determine whether it is a genuine risk, the business impact, and how to respond without causing unnecessary disruption.

Read more...
Duxbury Cybersecurity sharpens reseller offering
Duxbury Networking Information Security News & Events
Duxbury Networking has strengthened its Duxbury Cybersecurity business unit by adding WatchGuard and Cynet, giving South African resellers broader, more integrated coverage for the security risks customers are now asking them to address.

Read more...
Disconnect between confidence in identity security and operational reality
Access Control & Identity Management News & Events
New FIDO Alliance and HID study reveals gap between identity security confidence and reality; 94% of enterprises claim they can revoke employee access within 24 hours, yet 35% experienced delays or failures in the past two years.

Read more...
Paxton Solo training available to security installers
Paxton Access Control & Identity Management News & Events
Following the launch of Solo, Paxton’s brand-new access control system, the security manufacturer is rolling out dedicated Solo training sessions across South Africa to support security installers working with the system.

Read more...
Increase in cyberattacks on the manufacturing sector
Security Services & Risk Management News & Events Industrial (Industry)
According to a new Kaspersky ICS CERT report, in the first quarter of 2026, the percentage of industrial control systems (ICS) on which malicious objects were blocked reached 19,6% globally.

Read more...
NEC XON detects and stops ransomware attack
NEC XON Information Security IoT & Automation
Ransomware attacks rarely begin with chaos. More often, they start quietly, with probing, mapping, and patient reconnaissance inside a target’s network. That was the situation facing a global recruitment firm when cybercriminals attempted to navigate its systems.

Read more...
Sara AI Pentesting available in South Africa
Information Security News & Events
Synack and Wolfpack Information Risk are offering Sara AI Pentesting to organisations across South Africa, helping companies move from point-in-time testing to continuous security validation with AI and human expertise.

Read more...
Free POPIA Action List for gated access
ATG Digital News & Events Residential Estate (Industry) Training & Education Commercial (Industry)
ATG Digital, in partnership with CIVITAS, released the POPIA Responsible Party Action List. It is a free, practical guide for HOAs, body corporates, managing agents, landlords, employers and institutions. It helps them move from assuming compliance with the Protection of Personal Information Act (POPIA) to proving it.

Read more...
Sophos establishes South African legal entity to strengthen local operations
News & Events Information Security
Global cybersecurity company, Sophos, has announced the formation of its local legal entity, which will support local invoicing, partner enablement, compliance requirements and expanded regional investment.

Read more...
Cybersecurity in a digitally connected security industry
SA Technologies Information Security IoT & Automation
As more organisations move towards digital visitor management, cloud-based access control, mobile applications, biometric verification, and connected security platforms, cybersecurity must be viewed as part of the full security environment.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.