Betsson: AI Has Altered the Security Defence Landscape

(AsiaGameHub) –   Donald Tabone, Chief Information Security Officer at Betsson, has cautioned that human oversight is essential during the integration of Artificial Intelligence (AI), particularly as high-risk sectors confront an entirely new spectrum of threats.

To what extent do you believe AI has amplified the significance of adaptability in cybersecurity?

AI has introduced a completely new dimension to threats. While it has always been understood that people and technical systems represent some of the weakest links in security, AI has accelerated the exploitation of technical vulnerabilities and refined social engineering tactics.

Consequently, there has been a substantial surge in attacks that are exceedingly difficult for either systems or humans to detect, compelling security teams to rapidly implement AI-driven countermeasures. AI has so profoundly reshaped the security defense landscape that the importance of flexibility has become paramount.

How can we ensure that the increasing adoption of AI and automation does not introduce more vulnerabilities than it resolves?

It is imperative for humans to maintain control over the implementation of AI and automation. This necessitates the establishment of clear guidelines. Over-reliance on and excessive trust in AI could inadvertently expose us to greater vulnerabilities rather than solving existing problems. Human verification remains critical, as AI systems are still far from perfect and not yet fully dependable.

What measures can be taken to ensure efficiency in reporting potential threats and incidents?

AI excels at identifying potential threat patterns, pathways, and incidents, often surpassing human capabilities in complex environments. While it sometimes lacks context, AI systems are continuously improving in this regard. As their contextual understanding advances, they should also assist humans in prioritizing threat remediation efforts.

Has it become increasingly vital to dismantle internal barriers to enable rapid responses to potential cybersecurity threats?

Yes, this is absolutely crucial. Just as AI tools are being widely utilized for offensive purposes, the expanded adoption of AI tools to aid in detection and mitigation becomes indispensable.

Phishing, DDoS, and data breaches have been prominent in broader discussions about fraud; how are these attacks evolving specifically within the gambling sector?

These types of attacks have always existed, but they have evolved with AI enabling perpetrators to conduct impersonation attacks by cloning voices and signatures, with the aim of targeting employees through spear-phishing campaigns.

We recognize that these attacks are now significantly more sophisticated, leveraging emotion and timing to maximize their impact. When combined with AI, the opportunities to deceive individuals in a fast-paced environment like the gaming sector become particularly appealing to attackers.

As profit margins tighten, to what extent has cybersecurity become a competitive advantage for gambling operators?

Security has consistently been important for gambling operators as it safeguards the sources of value and protects player interests. Trust is a fundamental element of player retention; if a player feels secure, they will continue to engage in gaming.

Irrespective of profit margins, protecting the sources of value enables businesses to achieve their strategic objectives without unintended human interference or disruption. Therefore, yes, indirectly, the absence of security issues allows businesses to flourish, creating a subtle yet increasingly significant competitive edge.

What will be the most significant cyber threat to gambling operators in the next three years?

It is challenging to predict definitively, as three years is a considerable timeframe. However, at the current trajectory, several factors could emerge as primary concerns. These include:

• Widespread adoption of AI systems for malicious purposes,
• Challenges related to post-quantum cryptography,
• Geopolitical tensions,
• Increasingly fragmented cybersecurity legislation,
• Fragmented jurisdictional requirements,
• Weak governance structures concerning the adoption of AI and automation tools.

The era of taking security for granted has ended. Unless security is prioritized and becomes a quality characteristic of any product or service, vulnerabilities will be exploited at an unprecedented rate. This underscores the critical need for organizations to maintain firm control over how AI is adopted and governed.

Tabone is scheduled to speak at the SBC Summit in Malta regarding the evolving dynamics of cybersecurity. For further details about the event and to secure your attendance in Malta, please click here.