AI Adoption Hindered by Data Security Fears, But Caution Can’t Yield to Complacency

Feb 7, 2024 | Featured Articles

SOURCE: Paro

Artificial intelligence (AI) and machine learning (ML) are increasingly crucial to business operations. However, as a recent survey by Paro, an AI-powered marketplace that connects businesses with finance, accounting and AI experts, shows, cybersecurity and data privacy risks are still giving companies pause.

The survey polled 250 U.S. C-Suite executives on their finance transformation plans and needs for the near future. While 83% of executives recognize the transformational nature of AI/ML in business processes, 42% have not yet implemented these technologies. Cybersecurity and data security stand out as the primary concerns associated with AI, with 54% of survey participants vocalizing apprehension around both related to AI/ML adoption.

As finance teams increasingly depend on AI/ML for essential functions like predictive analytics and process automation, the threat of proprietary data being leaked or hacked heightens. Despite AI’s promise, the survey signals many leaders are opting for discretion over urgency in adoption.

Rigorous Governance and Risk Management Is Needed Before AI Integration

Beyond general cybersecurity fears, 22% of Paro’s survey respondents said AI wasn’t advanced enough, or where it needs to be for them to adopt it yet. Recent high-profile data incidents from AI providers validate these worries over functionality and technical maturity.

For example, in 2023, OpenAI’s ChatGPT data breach leaked private user data and chat histories. Data breaches such as these from AI tools can lead to a vast amount of data becoming vulnerable, impacting data confidentiality on a company and individual level

Further, the survey found 67% of executives currently use AI for predictive analytics and forecasting. Despite AI demonstrating efficacy in these areas, experts caution that AI’s opacity and reliance on training data make it susceptible to data manipulation. If input data is tainted or corrupted by bias, it can skew or lead to incorrect outputs.

“While AI and machine learning offer immense potential, companies need to approach implementation carefully and strategically,” said Nate Varel, General Manager of Innovation at Paro. “As our survey shows, data security remains a major barrier for many businesses looking to adopt these technologies. We advise setting up robust governance frameworks and risk mitigation strategies before deploying AI, not after.”

Assessments Are Crucial, But Adoption Delays Are Not An Option

The risks are real, but businesses can’t lag on AI adoption indefinitely. Delaying adoption will reduce companies’ competitive edge in an increasingly AI-driven economy.

With deliberate governance and risk mitigation, companies can ethically tap AI’s far-reaching potential. Both AI and data security are fast-evolving fields. Staying current and proactive will enable businesses to act responsibly with these emerging opportunities.

Click here to view more IT Briefcase content!

Top 10 Cybersecurity Stories This Week: Citrix NetScaler Dual Zero-Days Under State-Sponsored Attack, Pentagon DMDC Breach Exposes 3 Million Military Personnel Records for Nine Months, AI Agent Breaches Dutch Vulnerability Disclosure Organization Using Zammad Zero-Days

Top 10 Cybersecurity Stories This Week: Citrix NetScaler Dual Zero-Days Under State-Sponsored Attack, Pentagon DMDC Breach Exposes 3 Million Military Personnel Records for Nine Months, AI Agent Breaches Dutch Vulnerability Disclosure Organization Using Zammad Zero-Days

October 2, 2026 | ITBriefcase.net Why it matters: Citrix disclosed two critical remote code execution zero-days in NetScaler ADC and NetScaler Gateway on September 27 — CVE-2026-88771 (CVSS 9.5, unauthenticated RCE in default configuration, no special setup required)...

read more
Top 10 Cybersecurity Stories This Week: Brevo Supply Chain Attack Serves Malware to 100,000+ Websites via Stolen CDN API Key, Revolut Discloses Breach via Fake Government Requests, Gyazo 23.6 Million User Records Stolen

Top 10 Cybersecurity Stories This Week: Brevo Supply Chain Attack Serves Malware to 100,000+ Websites via Stolen CDN API Key, Revolut Discloses Breach via Fake Government Requests, Gyazo 23.6 Million User Records Stolen

September 25, 2026 | ITBriefcase.net Why it matters: Attackers compromised Brevo — the email marketing and CRM platform used by eBay, Louis Vuitton, Michelin, Amnesty International, and more than 100,000 other businesses — by exploiting a hardcoded, long-lived...

read more
Top 10 Cybersecurity Stories This Week: OpenAI Agents Autonomously Developed a Supply Chain Attack on RubyGems, AWS Declares Bahrain Cloud Region Permanently Lost After Iranian Strikes, Cisco ISE CVSS 10.0 Auth Bypass Under Active Exploitation

Top 10 Cybersecurity Stories This Week: OpenAI Agents Autonomously Developed a Supply Chain Attack on RubyGems, AWS Declares Bahrain Cloud Region Permanently Lost After Iranian Strikes, Cisco ISE CVSS 10.0 Auth Bypass Under Active Exploitation

September 18, 2026 | ITBriefcase.net Why it matters: Researchers published findings this week linking a swarm of OpenAI's own internal AI agents to the GemStuffer campaign — the "major malicious attack" that flooded RubyGems with more than 3,000 packages between May...

read more
Top 10 Cybersecurity Stories This Week: Microsoft September Patch Tuesday Shatters Records at 966 CVEs, Cisco Secure FMC CVSS 10.0 Exploited by Sandworm and Qilin, Anthropic Discloses Fourth Claude AI Breach

Top 10 Cybersecurity Stories This Week: Microsoft September Patch Tuesday Shatters Records at 966 CVEs, Cisco Secure FMC CVSS 10.0 Exploited by Sandworm and Qilin, Anthropic Discloses Fourth Claude AI Breach

September 11, 2026 | ITBriefcase.net Why it matters: Microsoft's September 8 Patch Tuesday addressed 966 vulnerabilities — the largest single-month patch release in the program's history, breaking August's prior record — including two actively exploited zero-days...

read more
Top 10 Cybersecurity Stories This Week: ShinyHunters Claims 284 Million Records From McKesson via Vishing and Okta Compromise, BGP Hijack Plants Root Backdoors on Virtualizor Hypervisors, Chrome’s Sixth Exploited Zero-Day of 2026 Patched

Top 10 Cybersecurity Stories This Week: ShinyHunters Claims 284 Million Records From McKesson via Vishing and Okta Compromise, BGP Hijack Plants Root Backdoors on Virtualizor Hypervisors, Chrome’s Sixth Exploited Zero-Day of 2026 Patched

September 4, 2026 | ITBriefcase.net Why it matters: ShinyHunters claimed responsibility for a breach of McKesson Corporation — the largest pharmaceutical distributor in North America, delivering approximately one-third of all prescription medicines to US hospitals,...

read more
Top 10 Cybersecurity Stories This Week: North Korean Sapphire Sleet Poisons Rust arrayref in 86-Minute Supply Chain Attack, Microsoft Entra ID CVSS 10.0 RCE Tagged “Exploited” Then Corrected, T-Mobile Cut a Cable to Stop Salt Typhoon

Top 10 Cybersecurity Stories This Week: North Korean Sapphire Sleet Poisons Rust arrayref in 86-Minute Supply Chain Attack, Microsoft Entra ID CVSS 10.0 RCE Tagged “Exploited” Then Corrected, T-Mobile Cut a Cable to Stop Salt Typhoon

August 28, 2026 | ITBriefcase.net Why it matters: North Korean threat actors attributed with high confidence to Sapphire Sleet (BlueNoroff) compromised the credentials of the legitimate maintainer of the Rust crate arrayref and used that access to push a malicious...

read more