AI and MSPs: Navigating the new cybersecurity frontier

Managed service providers (MSPs) have seen their portfolios expand significantly over the past decade, from primarily handling the nuts and bolts of systems to becoming frontline defenders in an increasingly complex digital threat landscape. However, there is a growing component in most MSPs’ workflows: artificial intelligence (AI).

Smart tech, smarter threats

AI is transforming industries, but not all of its effects are beneficial. Primarily, AI introduces a range of cybersecurity threats that are increasing in both scale and sophistication. These dangers stem from AI’s dual-use nature — while it strengthens defensive capabilities, it can also empower malicious actors with powerful new tools to exploit vulnerabilities. Cybersecurity has always been an “arms race” between good and bad actors; now, AI has supercharged the competition.

One of the most pressing concerns is the use of AI to enhance traditional cyberattacks. Cybercriminals can utilize machine learning algorithms to automate the discovery of system vulnerabilities, conduct brute-force attacks more efficiently, and even adapt malware to evade detection.

AI also enables the creation of compelling phishing campaigns by generating realistic emails, voice messages, or even deepfake videos that mimic real individuals with alarming accuracy. These personalized attacks, often referred to as spear phishing, are much harder to detect and resist.

Tom Arnold, cybersecurity expert and author of the Digital Detective, tells SmarterMSP.com that AI agents have not been proven over time. “This means that they can become fixated on false conditions and potentially miss real issues,” he shares, adding that AI is dependent on the training. “This means an expert is still needed to coach and keep the AI system on track.” He also notes that changes in attack vectors may result in significant threats when AI is relied on too heavily.

Balancing AI innovation with cybersecurity vigilance

Lei Gao, Chief Technology Officer at SleekFlow, an AI-powered e-commerce revenue platform, tells SmarterMSP.com that while AI presents numerous opportunities, it also brings specific cybersecurity risks that businesses need to consider.

“For instance, within SleekFlow — as we place AI-based automation throughout various messaging channels — we’ve learned just how crucial it is to protect AI systems against more sophisticated phishing attacks that leverage AI to create convincing, targeted messages,” Gao notes.

Another significant hazard, according to Gao, is inherent in the data that AI models depend on. “If the training data is tampered with or corrupted somehow, an AI can learn wrong behaviors, such as harmful ones, which could leave the automated decision-making process open to exploitation.” This type of manipulation, known as a ‘data poisoning’ attack, can erode trust and compromise AI performance.

Gao also adds that while AI can automate many jobs effectively, depending entirely on AI with no human supervision can create security gaps.

“We provide a combination of AI Automation and manual expert checks to provide a robust layer of security to customer interactions,” Gao says, observing that even as the use of AI increases, companies should bake cybersecurity best practices into each stage of AI design and implementation to get ahead of new threats.

A.J. Thompson, Chief Commercial Officer of England-based MSP Northdoor, also says data poisoning attacks are one of the leading threats posed by AI.

“Criminals corrupt AI training datasets with malicious information. When businesses use these compromised AI models, they inherit hidden vulnerabilities or biases that affect decision-making processes,” Thompson says.

AI threats to watch out for

Other AI cybersecurity threats Thompson points to include:

• Large-scale misinformation campaigns: AI generates fake news articles, social media posts, and even entire websites to damage business reputations. A competitor could flood search results with AI-created negative reviews or false news stories about your client’s company.
• Prompt injection exploits: Attackers manipulate AI chatbots and assistants by embedding hidden commands in seemingly everyday conversations. These injections can extract confidential information or bypass security restrictions built into AI systems.
• Shadow AI deployment: Departments implement AI tools without IT oversight. Marketing utilizes AI copywriting software, sales teams employ AI prospecting tools, and support staff utilize AI chatbots. Each unauthorized application creates potential security gaps.

Thompson says the key for MSPs is striking a balance between the benefits and drawbacks of AI. “AI security isn’t about preventing AI adoption – it’s about enabling safe AI adoption. The MSPs who master this balance will become indispensable partners rather than just service providers.”

Striking the right balance

As AI continues to evolve, so too do the threats it introduces. For MSPs, the challenge isn’t to resist AI adoption, but to ensure it’s done securely and responsibly. By combining intelligent automation with expert oversight and robust cybersecurity practices, MSPs can help their clients leverage AI’s potential without exposing themselves to its risks. In this new era, the real differentiator will not be just who uses AI, but who uses it wisely.

Note: This article originally appeared on SmarterMSP.com.