TRAIL #4: AI and Cybersecurity

Flashcards covering core cybersecurity concepts, banking cyberattacks, traditional and AI-powered cyber threats, cyber hygiene practices, and ethical customer data usage based on the lecture notes.

Cybersecurity

The practice of protecting a bank's digital systems, networks, applications, customer bank data, and financial assets from unauthorized access, cyber attacks, fraud, and other digital threats.

BDO ("Mark Nagoyo") Hack

A real banking-related cyberattack incident that occurred in 2021.

UCPB Cyber Heist

A real banking-related cyberattack incident that occurred in 2020.

CIMB Bank Philippines Incident

A real banking-related cyberattack incident that occurred in 2025.

Phishing

The fraudulent practice of sending emails or other messages purporting to be from reputable companies in order to induce individuals to reveal personal information.

Ransomware

A type of malicious software designed to block access to a computer system until a sum of money is paid.

Malware

Software that is specifically designed to disrupt, damage, or gain unauthorized access to a computer system.

Deepfake and Social Engineering

An AI-generated or AI-altered media that makes people appear to do things they never actually did, used in social engineering.

AI-Written Phishing Emails

A new AI-powered cyber threat characterized by flawless grammar and spelling, unlike old phishing scams.

AI-Powered Fraud Detection Evasion

A new cyber threat targeting fraud detection systems in banks that use AI and machine learning to spot unusual behavior.

Cyber Hygiene

The everyday practices and habits people and organizations follow to keep their computers, mobile devices, networks, and data safe from cyber threats.

4 Keys for Cyber Hygiene

The four key components of cyber hygiene:

1. Password

2. Authentication

3. Data discipline

4. Spot the signs

Ethical Use of Customer Data: Rule of Thumb

"If it's sensitive, keep it secure."

Ethical Use of Customer Data: What not to share with AI/Chatbots

Sensitive customer data including Account details, Credit Card Numbers, and IDs.

Ethical Use of Customer Data: Customer Data is Trust Currency

Described as a "trust currency" where protecting it equals protecting PNB's reputation.

Digital Guardian of PNB

• The concept that cybersecurity is not just IT's job, but everyone's job

• Reporting process for suspected phishing or system issues

• Creating a culture of vigilance.