On October 16, 2024, the New York State Department of Financial Services (DFS) issued an industry letter providing guidance on how DFS-regulated entities (covered entities) should be evaluating and responding to artificial intelligence (AI)-driven cybersecurity risks.
In the letter, DFS enumerates several AI-driven cybersecurity risks, based both on the use of AI by threat actors and on a covered entity’s own use of AI.