ICO Publishes Five-Step Plan to Counter Emerging AI-Powered Attacks

The UK Information Commissioner’s Office published a five-step guidance urging organisations to prepare for AI-driven cyber threats—highlighting risks such as AI-enhanced phishing, deepfakes, automated vulnerability exploitation, adaptive malware, credential stuffing, data poisoning and prompt injection—and recommending baseline controls (Cyber Essentials, Cyber Governance Code), multilayered defenses (MFA, strong passwords, patching, least privilege), incident response testing, AI governance (DPIAs) and data protection measures to build cyber resilience and public trust.