CSO – “The word “free” has always tempted employees who are looking for an app or template to make their work easier. These days, combine “free” with “AI” and the lure is almost irresistible. Since the release of ChatGPT in late 2022, free AI-themed apps have exploded. Unfortunately, some are created by threat actors. One of the latest examples, reported this week by Malwarebyes, claims to be an AI video editor, but really installs the Lumma Stealer malware. Victims were lured by promises like “Create breathtaking videos in minutes,” “No special skills required – anyone can do it,” and “On September 1 we’re giving away 50 lifetime licenses to our AI editor!” According to a report released last month by Slack, AI use in the enterprise is growing. Among those employees who are using AI applications, 81% said it has improved their productivity. That’s why some may be curious – or eager – to try a free AI app. However, that same report notes that nearly 40% of respondents said their company has no AI usage guidelines. One result: Shadow AI, defined as the unapproved use of artificial intelligence-based applications. CISOs need a strategy to cope. It starts with management deciding if it wants to allow the use of AI in the workplace at all…”