A 'code red' for cybersecurity? How to prepare for a possible wave of AI hacking

Jason Clinton, Anthropic's deputy chief information security officer, recently posted an ominous warning on X after several serious cybersecurity vulnerabilities were made public.

He wrote, "as bad as things have gotten in the past 4 days, they are going to get a lot worse before they get better. security leaders, never let a crisis go to waste: please go to your boards and ask for help right now. not for ai, for the basics. (we need to hold on for ~18 months.)”

Salesforce CEO Marc Benioff responded, "Jason is 100% right. Code red."

Clinton has been sounding this alarm for some time. In August, he posted, "The vulnerability tsunami is coming in just a few months and there won't be enough time to patch critical infrastructure.”

The warnings arrive amid a run of cybersecurity threats. On Oct. 21, two newly disclosed vulnerabilities impacting as much as 70% of the internet sent companies and individuals scrambling to apply the fix.

The next day, Quest Diagnostics, one of the largest providers of medical lab services, reported "unauthorized access" to its Quanum Lab Services Manager and said "certain patient records" were accessed.

Data breaches are as old as the internet. What worries experts now is how AI could become an unprecedented hacking tool.

AI engineer and investor Matt Shumer explained on X that AI gives hackers three advantages. Models can find vulnerabilities more easily. Once they do, "AI can now break in on its own. No skilled hacker required." And defenders "are racing to keep up," because attacks move faster than systems can be shored up.

While Clinton advised security leaders to focus on the basics, the same should apply to individuals. Although you can't personally defend against many of these attacks, you can lock down much of your personal and financial information.

How to protect yourself

Keep everything updated. We make it easier for the hackers when we don't keep our hardware and software up to date. Make sure your phones, computers and apps are running the latest software, as these updates often fix security holes.

Use a password manager. Password managers make it easier to assign a different password for every website and service you use. These apps create robust passwords automatically and store them securely. The benefit is that if one site you use is hacked, your other passwords stay safe.

Turn on multifactor authentication (MFA). This is an easy way to add extra protection to your critical accounts. MFA comes in different forms. It can be a PIN or code sent to your email or phone. It can also be your face or fingerprint. You can also use an authenticator app with a code that changes every 30 seconds.

Freeze your credit. Freeze your credit reports when you don't need to apply for credit. You can freeze and unfreeze your credit using the Equifax, Experian and TransUnion apps or websites. It's free, but watch out for upsells for services you don't need.

Lock your mobile account. Ask your carrier, usually through its official app, to block unauthorized purchases, SIM swaps and carrier transfers.

Get an IRS Identity Protection PIN. This six-digit number prevents someone else from filing a tax return using your information and collecting your refund. The IRS says the easiest way to get an IP PIN is by logging into your online account.

Lock your retirement account. If you have a retirement account, you can freeze or lock it to prevent outbound electronic money transfers. Fidelity, for example, calls it "money transfer lock.”

Be skeptical of unexpected contact. Be skeptical of any text message, email or phone call you don't recognize. Assume it's an attempt to get your personal information. Don't click or respond to anything you aren't sure is genuine. If you're unsure, call or visit the source directly. If they pressure you or make it seem like it's urgent, it's likely a scam. Banks and government agencies don't operate like that.

Set a family safe word. AI has made it easy to clone voices and create fake images. An easy way to combat that is to set up a safe word for your family that you don't share with anyone else. If a family member asks for help or information they don't normally need, ask for the safe word.

While you can't prevent every hack, taking some preventative measures now greatly improves your odds of staying safe.