Lengthy Seaside, California–On the solely recognized convention associated to cybersecurity within the freight trade, there wasn’t a lot dialogue right here of AI as a instrument that can be utilized to struggle cyber crooks.
As an alternative, through the first half of day one of many cybersecurity convention sponsored by the Nationwide Motor Freight Transport Affiliation (NMFTA), the commerce group servicing the LTL trade, the subject of AI was both not mentioned at nice size or got here with a warning that the unhealthy guys are going to make use of it, making an ongoing battle even harder.
What wasn’t heard had been statements alongside the traces of “hey, there’s this one firm that has constructed this nice AI-powered instrument to guard cybersecurity and struggle freight fraud.”
The presentation by James McQuiggan, the advisory chief info safety officer at Obvious Safety, was extra an instance of how the cybersecurity trade is approaching AI, seeing it as a foe somewhat than an asset, at the very least at this level.
The darkish facet
When McQuiggan was launched, it was to say that “he’s going to be speaking in regards to the darkish facet of AI, how cybercriminals use it for his or her functions.”
And that was what he spoke about, with no reference to any instruments–but–which may assist the cybersecurity groups fend off intruders trying to crash a system and take it hostage.
McGuiggan made shows of “deepfakes” stealing voices and appearances, utilizing AI to provide the deceptions.
“We’ve been taking part in round with massive language fashions and agentic AI now for the final 4 plus years, and cybercriminals are doing the identical factor,” McGuiggan stated.
And that’s vital. McGuiggan stated AI can create cybersecurity vulnerabilities not simply from an outsider efficiently hacking an organization, whether or not pushed by AI or not, however via inside use of an AI instrument that goes awry. McGuiggan referred to it as “shadow AI.”
“You already know that your customers are going to be leveraging AI functionality,” McGuiggan stated. “They wish to. They’re not doing it to be malicious. They’re doing it as a result of they wish to be extra environment friendly.”
However he added that the interior customers should be educated on the dangers their use of AI in an organization setting can do to lift the dangers for a profitable outdoors assault.
LinkedIn nonetheless an issue
On the 2025 version of the NMFTA cybersecurity convention, one instance of cybercriminals searching for entry to an organization that caught the attendees’ consideration got here from Todd Florence, the CIO of Estes Categorical, who stated outdoors cybercriminals had been organising faked LinkedIn accounts that includes stunning ladies, hoping an inside worker (presumably male) would search to attach with them, hoping to satisfy them professionally…after which perhaps personally.
McGuiggan’s reference to LinkedIn at this 12 months’s convention was much less lighthearted. And AI performed a task.
“It’s lots simpler with agentic AI to have the ability to undergo and acquire all the data that they want total,” he stated. “Cybercriminals are going via and scraping LinkedIn, your web sites, people who work at your group.You already know shippers and brokers, carriers, and should you’ve acquired pretend ones which can be being generated, you’re going to take care of a variety of fraud, take care of a variety of spoofed domains, all making an attempt to earn cash.”
He contrasted the fraudulent emails that might arrive from cybercrooks just some years in the past, notorious for his or her frequent misspellings and unhealthy grammar, with what’s coming off an LLM as we speak. Right now’s output has eradicated these errors and is extremely polished, McGuiggan stated.
“Within the final couple of years, we’ve been listening to about agentic AI with the ability to leverage that, scheduling issues for us, our e-mail and sending out responses,” McGuiggan stated. Ransomware assaults are “totally leveraging AI,” he added.
What firms are up in opposition to, McGuiggan stated, is a state of affairs the place a cybercriminal can make investments as a lot as $100,000 on a deepfake marketing campaign, and are available again with a ransom fee within the thousands and thousands.
The NMFTA assembly is a comparatively small gathering, however it’s attended by folks laser-focused on the problem. Possibly they’re with a provider; perhaps they’re offering cybersecurity companies to firms making an attempt to determine how to not be a mark. There are a number of presidency officers as effectively.
Melanie Padron, the vice chairman of strategic development at IT Architeks, who works solely with transportation firms on cybersecurity points, spelled out the five-point “cyber battle plan” she stated IT Architeks undertakes with firms which can be contemplating hiring their companies.
Melanie Padron addresses the NMFTA cybersecurity convention.
The plan touches on factors she made in her presentation, and aligns with form of a normal “name to motion” that has been the self-help theme at these current conferences.
The plan: one, clearly establish the individual at an organization who owns cybersecurity (which isn’t at all times clear); two, decide the final time there was an unbiased cyber danger evaluation; three, decide when the latest incident response plan was studied; 4, get a “full vendor entry audit”; and 5, decide when the latest “full backup restoration entry audit” came about.
The final level introduced an statement from Padron.
“Do you have got a brand new brake system on your vans?” she requested. “Would you simply belief the phrase, or would you check it? You check it. You examine it. You doc it. You practice your drivers on it. Cybersecurity needs to be no totally different.”
Some optimistic AI makes use of on the horizon
Padron, on the sidelines of the convention, additionally pushed again in opposition to the concept AI will not be but proving to be a drive that may permit the forces combating cyber crooks to push again. She stated her firm is reviewing a number of AI instruments which can be focused towards the “shadow AI” points referred to by McGuiggan.
One of many first panels featured two people who’re on the entrance traces of cybersecurity and trucking: Erica Brigance, vice chairman of know-how at LTL provider ArcBest (NASDAQ: ARCB) and Florence, showing earlier than one other NMFTA cybersecurity occasion.
Estes hack nonetheless is remembered
Florence is one thing of a rock star on this planet of trucking cybersecurity, having been the chief know-how official three years in the past on October 1, 2023–the presentation was someday earlier than the anniversary–when LTL provider Estes was hit with an enormous cybersecurity assault.
The general public method by CEO Webb Estes was broadly lauded as successful in being so open to the general public in regards to the firm’s travails. When Estes made a public broadcast to convey his clients and others updated on the place the corporate’s restoration efforts stood, Florence was at his facet.
Florence, talking to BigRig on the convention, stated he made quite a few cellphone calls to clients throughout that point. And he stated what shocked him had been the quantity who stated throughout their response some model of “after we had our cyberattack.”
“The threats are growing, and the best way that we’re combating that can be altering enormously,” Brigance stated. “But it surely’s ever current. It definitely retains me up at night time. It’s definitely the explanation why, as quickly as I get up within the morning, I’m my cellphone as effectively.”
Extra articles by John Kingston
One other facet of Montgomery: it would make human brokers extra helpful
Per diem: one method is secure, different is greater
Daimler Truck: involved about utilizing money to keep away from new NoX guidelines
The submit For transportation cybersecurity, AI isn’t serving to struggle..up to now appeared first on BigRig.