The rapid spread of artificial intelligence in recent years has fundamentally changed the way we understand security in the digital age. AI systems are now used to detect cyberattacks, prevent fraud, improve security in critical infrastructure, and even for military applications. However, while they are often presented as powerful tools for protection, an equally critical dimension is rarely considered: what happens when artificial intelligence itself becomes the target of attacks?
See also: FortiGate: Automated attacks change firewall settings

Unlike traditional information systems, AI models are not just based on code, but also on data and training processes. This makes them vulnerable to new, more insidious forms of attack. One of the most important is training data corruption, in which malicious actors introduce misleading or incorrect information so that the system learns incorrect patterns. The result can be an AI that makes dangerous decisions without appearing to have been compromised in the traditional way.
In addition, so-called counterexample attacks have emerged, where small, almost invisible changes in images, audio, or text are enough to fool a model. A facial recognition system can fail to recognize a person or, even worse, misidentify them. In high-security environments, such failures can have serious consequences, such as airports or surveillance systems.
See also: Apache bRPC: Vulnerability allows RCE attacks

The threat is not limited to the technical dimension. The manipulation of AI systems also raises critical ethical and legal questions. When an AI system makes an incorrect decision due to malicious interference, who is responsible? The developer, the organization using it, or the one who designed the training data? The absence of a clear framework of liability makes protecting AI even more imperative.
As artificial intelligence is increasingly integrated into critical sectors such as health, transportation, and public safety, it is becoming clear that we need a new approach to cybersecurity. It is no longer enough to just protect networks and servers; we must also protect the algorithms, data, and learning logic themselves. Developing resilient training methods, continuously evaluating models, and being transparent about their operation are key steps in this direction.
See also: British government warns of attacks by Russian hacktivist groups

Ultimately, security in the age of AI is not just about preventing attacks, but also about ensuring trust. If we want AI to function as an ally and not a weak link, we must recognize that it too needs protection. Only then can we harness its potential without putting society and our digital infrastructure at risk.
