AI-Powered Cyber Threats: How Bots Are Taking Over with Tim Ayling - Thales / Imperva

Episode Summary:

In this episode of The Cashflow Show, host Clayton M. Coke is joined by Tim Ayling, Vice-President of Cybersecurity Solutions, EMEA at Thales UK, to unpack the 2025 Imperva Bad Bot Report, which reveals bots now account for 51% of internet traffic. Tim explains what bots are, how AI makes them more dangerous, and their impact on industries like travel and SMEs. From polymorphic bots to denial-of-service attacks, he shares how Thales counters these threats and offers practical steps for businesses to stay secure in an AI-driven cyber landscape.

Key Discussion Points: 

• Bot Traffic Surge: The 2025 Imperva report shows bots make up 51% of internet activity, surpassing human traffic, with 37% being malicious (up from 32% in 2023). 
• What Are Bots?: Bots are automated code; while one-third are beneficial (e.g., Siri, WHO’s COVID bot), malicious bots target account takeovers and denial-of-service attacks. 
• AI’s Role: AI simplifies bot creation (e.g., for scalping Oasis tickets) and enables polymorphic bots that regenerate to bypass defenses. 
• Targeted Sectors: Travel, especially airlines, faces bot-driven ticket scalping, while SMEs are vulnerable but less targeted than banks or large firms. 
• Nation-State Threats: Organized crime and nation-states use bots for cyberattacks, with heightened activity amid global tensions. 
• SME Protections: Basic solutions like CAPTCHA and two-factor authentication help, while Thales offers advanced tools like web application firewalls and API security. 
• Future Outlook: AI-driven bots will grow more sophisticated, challenging cybersecurity vendors to keep pace over the next 2-5 years.

Key Takeaways: 

• Bots, empowered by AI, are a growing cybersecurity threat, with malicious bots driving significant risks like account takeovers and website crashes. 
• SMEs need affordable, basic protections like CAPTCHA, while larger firms require advanced solutions to counter polymorphic bots. 
• Two-factor authentication is a simple, effective defense for individuals and businesses against bot-driven account attacks. 
• The travel industry and APIs are prime targets, requiring specialized security to protect online operations.

Notable Quotes: 

• “A bot is just a small bit of code that can automate anything online… about a third of bots are actually good bots.” — Tim Ayling 
• “AI allows bots to learn when they don’t work… they regenerate themselves to find a way past defenses.” — Tim Ayling 
• “It’s a bit like Skynet right now… we’re using AI to attack the AI that’s coming in from the bad guys.” — Tim Ayling

Actionable Insights for Businesses: 

• Implement Basic Defenses: Enable two-factor authentication and CAPTCHA on websites to block basic bot attacks, especially for SMEs. 
• Explore SME Solutions: Research affordable cybersecurity providers offering bot protection, such as those integrated with AWS or similar platforms. 
• Secure APIs: If your business relies on online applications, invest in API security to protect against bot-driven data breaches. 
• Stay Informed: Download the 2025 Imperva Bad Bot Report to understand bot risks and tailor your cybersecurity strategy accordingly

Resources: 

• Download the 2025 Imperva Bad Bot Report via imperva.com (search “2025 Bad Bot Report”). 
• Visit thalesgroup.com for details on Thales’ application security and bot protection solutions. 
• Learn about two-factor authentication at cybersecurity.gov.uk.

The Cashflow Show can be reached here:
Website: .css-j9qmi7{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-flex-direction:row;-ms-flex-direction:row;flex-direction:row;font-weight:700;margin-bottom:1rem;margin-top:2.8rem;width:100%;-webkit-box-pack:start;-ms-flex-pack:start;-webkit-justify-content:start;justify-content:start;padding-left:5rem;}@media only screen and (max-width: 599px){.css-j9qmi7{padding-left:0;-webkit-box-pack:center;-ms-flex-pack:center;-webkit-justify-content:center;justify-content:center;}}.css-j9qmi7 svg{fill:#27292D;}.css-j9qmi7 .eagfbvw0{-webkit-align-items:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;color:#27292D;}