Financial Security Institute: "AI Agent Attacks Become Reality"...Sharing Countermeasures with the Financial Sector

APIs Emerge as Prime Targets for Attacks
Emphasis on Proactive AI Security Assessments and Strengthened Management

As attempts at cyberattacks using artificial intelligence (AI) agents targeting the financial sector are becoming a reality, the Financial Security Institute shared related threat information and response strategies with financial institutions.

The Financial Security Institute announced on the 18th that it held the "Financial AI Security Threat Response Seminar" at the Bulls Hall of the Korea Financial Investment Association in Yeouido, Seoul, on the 17th, with approximately 160 security officers from financial institutions in attendance.

This seminar was organized in response to the confirmation of actual attempts at AI agent-based attacks targeting the financial sector, with the objectives of sharing attack methodologies and threat intelligence, as well as discussing practical countermeasures for financial firms, such as using AI to identify vulnerabilities.

The Financial Security Institute especially pointed out that as attackers begin to leverage AI agents for cyberattacks, application programming interfaces (APIs), which connect data and systems, have emerged as key targets. The institute emphasized the need to strengthen API security management, including checking for security key leaks.

The Financial Security Institute highlighted the importance of “proactive security reviews and vulnerability remediation using AI” to keep pace with rapidly emerging AI security threats. At the seminar, white hackers from the Financial Security Institute shared AI-driven security assessment methodologies and vulnerability detection know-how accumulated during actual security assessments, with security officers from financial institutions.

In addition, in light of the rapid regulatory relief regarding network separation rules by the Financial Services Commission, the institute also presented security measures and best practices for the safe utilization of security-purpose AI and software as a service (SaaS), whose use is expanding.

Sangwon Park, President of the Financial Security Institute, stated, "As there are now confirmed cases of non-human AI agents being utilized in cyberattacks, it has become crucial for the financial industry to establish systems that can respond swiftly to AI threats," adding, "We will continue to strengthen our AI security capabilities and support infrastructure so that financial institutions can respond promptly to the fast-evolving AI threats and maintain financial stability."

This content was produced with the assistance of AI translation services.