Companies are turning to generative AI to train their employees on cybersecurity threats through real-time simulations of cyber attacks. Two new products have recently been launched, highlighting the growing interest in providing this type of training.
Ironscales, an enterprise cloud email security platform, has announced the beta launch of its GPT-powered Phishing Simulation Testing (PST). This tool aims to help employees quickly personalize their cyber training in response to the increasing number of socially engineered attacks. Spear phishing emails, which target specific individuals, organizations, and companies for scams and cyberattacks, can be difficult to detect. Ironscales’ program can generate personalized spear phishing simulation campaigns to combat these advanced phishing attacks. The simulations are created using PhishLLM, Ironscales’ proprietary large language model trained on millions of data points from the Ironscales community.
Employees receive these simulated phishing emails in their inboxes. If they click on any links or buttons within the email, they will be informed that it was a test and directed to a training video to further educate them on how to identify such threats in the future. Since employees don’t know when or from whom these emails will be sent, the tests are true phishing simulations.
“We are seeing a significant increase in customers seeking tools and technologies to counter the growing threats posed by sophisticated socially engineered attacks like spear phishing and business email compromise,” said Ironscales CEO Eyal Benishti. “The fact that human error contributes to over 73% of data breaches emphasizes the urgency and importance of our adaptive AI and human-centric approach in strengthening email and overall organizational security. Adaptive AI and machine learning are not just tools for our R&D teams; they are the lifeblood of innovation for our solutions. We are extremely proud of these latest AI-driven advancements that offer better protection, simplify operations, and empower organizations.”
Ironscales has also introduced a new feature called Accidental Data Exposure (ADE), which uses advanced algorithms to quickly identify and alert employees about emails that may leak sensitive data. This feature enhances employees’ security awareness and proactively prevents potential data leaks in real-time.
In the meantime, Norwegian cybersecurity startup Pistachio, formerly known as CYBR, has unveiled its AI-driven security training platform. The platform aims to help companies mitigate human error in cyber defense. By using AI, the software assesses each employee’s security strengths and weaknesses through simulated cyber attacks. Once an employee profile is created, the platform sets up an individualized security training program. The simulated attacks continue until the individual’s training reaches a satisfactory level, ensuring that the entire workforce is capable of handling new threats.
“The accessibility of AI technology has completely changed the game for cybersecurity,” said Mohammed Awais, co-founder and CEO of Pistachio. “Previously, scammers would send out generic phishing emails to large groups and hope for success. Now, they can tailor their attempts to individual targets with minimal effort. Without personalized cybersecurity training, many of these attacks will succeed.”
Pistachio also announced that it has secured €3.25 million ($3.56 million) in funding from an investor group led by Signals Venture Capital.