How North Korean hackers turned Binance's own internal AI into a weapon in $6.3b heist - interview

Two weeks after the Binance cyberattack, in which North Korean hackers stole about $6.3 billion from the cryptocurrency exchange, internal investigations shed light on what really failed. And according to a cyber expert, the real novelty in the attack is the use of Binance's own artificial intelligence models to carry out the attack.“The new thing here is not that the attacker had AI. It is that the victim did. On 20 October, the attacker used one of Binance's own internal AI tools as part of reaching two more engineers' computers,” Ori Segal, CEO of Cybore, told The Jerusalem Post on Thursday.Segal, whose company developed a system designed to detect suspicious activity during Zoom calls, explained that, aside from that, every step of the attack was carried out classically, using a poisoned package manager, a fake recruiter, a malicious file, credential reuse, and an over-broad deployment permission.“None of it required a model,” he said, adding that while most cybersecurity experts have been asking what hackers can do with AI models since their inception in 2023, not many have asked what hackers can do with the AI tools the companies use.“This is the first large incident where that question appears in the public record at all,” he added.With no guide to identify, prevention is keySegal also said that there is very little…