Why digital identity is a major battleground in cybersecurity

We’ve been living with widely available generative AI tools for almost two years now, so it’s time to ask the question: What impact does this have on the public’s understanding of their own digital identity and how secure their online identity is? ? The answer, unfortunately, shows that there is still much work to be done to improve our online security in the age of artificial intelligence. According to a recent study by Okta, the vast majority of consumers across Europe (93%) are concerned about digital identity theft, and more than half (54%) of consumers have increased their awareness of their digital footprint over the past year. This increased vigilance is driven by the rise in cyber attacks and advances in artificial intelligence, which are both creating new challenges and exacerbating existing vulnerabilities in the online environment.

Given that this is access to any experience in the digital world, focusing on digital identity should be a priority. It serves as a basic level of security and access control. With 80% of cybersecurity attacks resulting from credential abuse, identity-based attacks have become a primary method for attackers to exploit weaknesses in authentication processes. In response, business leaders must quickly adopt strong security strategies and develop a security-conscious work culture, especially in the age of artificial intelligence.

Stephen McDermid

Head of Security for EMEA at Okta.

Growing adoption of cyber hygiene practices

More than half (52%) of UK consumers know someone whose personal data has been hacked. Clearly, there is already concern about cybercrime and a willingness to improve cyber hygiene. For example, 43% of people in the UK report using a different password for every online account. This practice greatly improves security by ensuring that hacking one account does not compromise others. In contrast, only 11% use the same password for everything, indicating a growing awareness of the risks associated with password reuse. The shift towards safer online behavior reflects a greater understanding of the importance of protecting personal information in an increasingly digital world.

While it’s encouraging that consumers have a basic understanding of cyber hygiene, the results show that it’s simply not enough. Users need help managing their passwords—which we should be moving away from anyway—and there is still a lingering fear about the implications of AI and the potential security threat it poses.

The Dual Role of AI in Cybersecurity

The AI boom has brought a whole new dimension to European and UK concerns about digital identity. On one hand, AI improves cybersecurity by detecting and eliminating threats faster than traditional methods. However, it also creates new risks, allowing for more sophisticated cyberattacks such as phishing schemes generated by artificial intelligence. The negative impacts of the technology appear to be where most UJ consumers focus their attention: over half of consumers (54%) in the UK believe that AI has made the online environment less safe; among 18-24 years old. Additionally, AI increases the likelihood of digital identity attacks.

The UK public is well aware of the risks posed by artificial intelligence, so it is vital that regulation is introduced to mitigate these risks and ensure we can realize the potential benefits of the technology in a safe and secure way.

Workplace accounts – the forgotten threat

The average consumer has 100 accounts to their name, ranging from social media to online shopping and subscription services. The range is huge, but not all are created equal in terms of risk. It’s no surprise that financial services and online banking accounts are the biggest concern for consumers because that’s where their money is. In fact, 60% cite this as their top concern, but are they missing a trick?

In some recent cyber-attacks, such as the NHS hack and the 2022 MailChimp data breach, workplace accounts were the primary vector used by attackers to compromise an organization’s system. Despite this, workplace accounts are considered a primary purpose by just 2% of UK consumers. Organizations should take this attitude into account. If employees don’t believe these digital identities are being targeted by cybercriminals, then businesses need to make sure these accounts are more secure because their employees simply aren’t paying enough attention.

Balance between convenience and safety

It is clear that there is concern about cybersecurity and a desire to become more resilient, as evidenced by the 71% of European consumers who are actively planning to improve their digital identity strategies to improve security. While 45% consider protecting their online identity a personal responsibility, businesses also need to do more to protect their personal data ecosystem, as evidenced by the limited focus on workplace accounts. This approach must be collaborative, as agreed by the 26% of consumers who believe protecting identities online should be a shared responsibility. For this to work effectively, we need people to take proactive measures, governments to enforce regulations, and businesses to implement strong security measures to ensure a safer online environment for everyone.

One of the key changes should be making passwords a thing of the past. Not only are they less secure, but they also create additional burdens for users: 65% of respondents to Okta’s 2023 Customer Identity Trends Report feel overwhelmed by the number of usernames and passwords they have to manage. Luckily, there are passwordless options that offer both stronger authentication and greater convenience for consumers. For example, allowing users to authenticate using biometrics reduces authentication hassle and improves security since the stream is typically not a “phishing” stream.

With cybersecurity concerns growing in Europe and across the UK, business leaders must quickly adopt strong security strategies and develop a security-focused work culture, especially in the age of artificial intelligence where advanced technologies can both enhance and threaten security measures. This includes implementing multi-factor authentication, passwordless technology, continuous monitoring and regular updates to security protocols, and increasing employee cybersecurity awareness. By integrating these practices into their overall business strategy, organizations and governments can protect sensitive information, maintain trust and ensure sustainability in an increasingly digital world.

We’ve introduced the best protection against identity theft.

This article was produced as part of TechRadarPro’s Expert Insights channel, where we profile the best and brightest minds in today’s tech industry. The views expressed here are those of the author and do not necessarily reflect those of TechRadarPro or Future plc. If you are interested in participating, find out more here: https://www.techradar.com/news/submit-your-story-to-techradar-pro

Why digital identity is a major battleground in cybersecurity

Growing adoption of cyber hygiene practices

Archives

Categories