The AI-powered bullet vending machines are more likely to be targets of cyberattacks and software exploits to allow even non-ID holders to acquire live ammunition, according to a cybersecurity expert via Business Insider.
Norwegian security firm Promon's Andrew Whaley claimed AI-powered services become likely targets for bad actors as they can exploit weaknesses much more easily and bypass security measures.
Not only could hackers purchase live ammunition illegally, but the vending machines are also vulnerable to being abused to collect customer information through their facial recognition software.
This is despite the services undergoing rigorous security checks and being installed with cybersecurity systems.
Vending machines distributor American Rounds assured that its smart vending machines do not store or sell customers' personal data, ensuring a "better environment for all law-abiding gun owners."
The vending machines are currently available in select locations in Oklahoma, Alabama, and Texas. Another set of machines is set to be installed in Colorado within this week.
AI-Powered Software, Services May Experience More Cyberattacks
These cybersecurity issues are not isolated to American Rounds' AI-powered bullet vending machines, it is all digitized services currently using AI to operate.
Whaley warned that similar problems may arise on other AI-integrated services as retailers "inevitably broaden the attack surface for cybercriminals."
The Center for Security and Emerging Technology has earlier alerted the public on the huge risks in relegating service operations to AI due to how susceptible the technology is to exploits, more than the regular systems used before.
AI services are even more attractive to hackers due to the high amount of information they usually collect from customers, a low-hanging fruit ripe for picking.
How to Protect AI-Powered Services from Cyberattacks?
Whaley advised AI-powered service operators to issue security updates and conduct penetration testing regularly to improve the technology's security.
Providing ways to address all potential vulnerabilities in the machine could also help dissuade hackers from attempting to breach the services.
