The Prompt That Leaked
A worker asked an AI tool to write code for a marketing email but never said to hide addresses, so customers could see each other's emails.
Key terms
AP Cybersecurity alignment
- 1.4.B.4Output from AI-powered tools should be carefully evaluated. Verify information from AI-powered tools using reputable, stable, non- AI-based sources.Learning objective: Explain how to protect against some AI-augmented cyberattacks.
- 1.5.A.2AI-powered tools can analyze application code to identify vulnerabilities and recommend mitigations. Recommendations should always be reviewed by a knowledgeable programmer before being implemented.Learning objective: Explain how cyber defenders can leverage AI-powered tools to protect networks, applications, and data.
- 5.1.C.1Data security risks can involve a compromise of confidentiality when unauthorized persons can access sensitive data, integrity when data can be manipulated or altered from its intended state, and availability when data can be…Learning objective: Assess and document risks from application and data vulnerabilities.
AP Networking alignment
- 2.4.A.2Suggestions generated by AI may include unrealistic device recommendations, overcomplicated setups, and incorrect IP addressing schemes. Some suggestions might be technically accurate but inappropriate for a specific network.Learning objective: Evaluate an AI-generated network design, configuration, or troubleshooting suggestion.
- 4.5.A.1Unauthorized access, data exposure, or disruption of services can result from accidental or intentional misuse of systems by users. These impacts may occur when individuals access resources beyond their role, mishandle data,…Learning objective: Identify the impacts of common threats and vulnerabilities in a managed network.
- 4.5.B.2Security policies and procedures help reduce user-related vulnerabilities by defining acceptable behaviors and standardizing how systems and data are used. These controls can reduce misconfiguration, mishandling, or improper…Learning objective: Determine appropriate security controls to limit the impacts of common threats and vulnerabilities in a managed network.