New security risks emerge as GenAI traffic surges 890%
This raises new security challenges for enterprises in Japan and across the Asia-Pacific region.
While AI growth offers significant productivity benefits, the unsanctioned usage, emerging threats and lack of governance have rapidly expanded the attack surface for organisations, particularly across the Asia-Pacific and Japan region, according to The 2025 State of GenAI report produced by AI cybersecurity company Palo Alto Networks.
On average, organisations are now managing 66 GenAI applications, with 10% classified as high-risk.
As Thailand is projected to invest at least 500 billion baht on digital infrastructure to position itself as a regional AI hub, this underscores the urgent need for robust oversight frameworks to ensure GenAI technologies are deployed safely, securely and ethically.
"AI adoption offers transformative opportunities across both commercial and government sectors in the region. But as this report highlights, we are also seeing an expanding attack surface, particularly with the use of high-risk GenAI applications in critical infrastructure sectors," said Tom Scully, director and principal architect for Government and Critical Industries, Asia Pacific & Japan, at Palo Alto Networks.
Organisations must balance innovation with strong governance, adopting security architectures that account for AI's unique risks.
Proactive oversight and adaptive security controls are essential to ensuring that the benefits of AI are fully realised without compromising national security, public trust or operational integrity, he added.
The 2025 State of GenAI report is based on traffic analysis from 7,051 global enterprise customers.
According to the report, GenAI traffic increased more than 890% in 2024. Following the release of DeepSeek-R1 in January 2025, DeepSeek-related traffic alone spiked by 1,800% within two months.
Another key finding is rising data loss incidents. GenAI-related data loss prevention incidents more than doubled, now accounting for 14% of all data security incidents.
Shadow AI has emerged as a major risk. Unauthorised, unsanctioned GenAI use, dubbed "Shadow AI", has created blind spots for IT and security teams, making it difficult to control sensitive data flows.
The top three apps used in Thailand are Grammarly (36.56%), Microsoft PowerApps (30.99%) and OpenAI ChatGPT (23.41%).
Piya Jitnimit, country manager for Thailand at Palo Alto Networks, said Thailand's public and private sectors are increasingly integrating AI to enhance operational efficiency and service innovation.
"As adoption accelerates, it is imperative that we proactively address the emerging risks associated with these technologies," he said.
Establishing a robust governance framework, ensuring ethical and secure implementation and cultivating a digitally-skilled workforce are critical to advancing Thailand's vision of becoming a regional leader in AI, he added.
The report also recommended businesses seek to safely harness the potential of GenAI.
They should establish visibility and control to gain comprehensive oversight of GenAI app usage, implementing conditional access policies and managing permission at the user and group levels.
It also suggests they safeguard sensitive data by deploying real-time content inspection with centralised policy enforcement to prevent unauthorised data exfiltration.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Bangkok Post
12 hours ago
- Bangkok Post
US plans AI chip curbs on Malaysia, Thailand over China concerns
US President Donald Trump's administration plans to restrict shipments of AI chips from the likes of Nvidia Corp to Malaysia and Thailand, part of an effort to crack down on suspected semiconductor smuggling into China. A draft rule from the Commerce Department seeks to prevent China — to which the US has effectively banned sales of Nvidia's advanced AI processors — from obtaining those components through intermediaries in the two Southeast Asian nations, according to people familiar with the matter. The rule is not yet finalised and could still change, said the people, who requested anonymity to discuss private conversations. Officials plan to pair the Malaysia and Thailand controls with a formal rescission of global curbs from the so-called AI diffusion rule, the people said. That framework from the end of President Joe Biden's term drew objections from US allies and tech companies, including Nvidia. Washington would maintain semiconductor restrictions targeting China — imposed in 2022 and ramped up several times since — as well as more than 40 other countries covered by a 2023 measure, which Biden officials designed to address smuggling concerns and increase visibility into key markets. All told, the regulation would mark the first formal step in Trump's promised overhaul of his predecessor's AI diffusion approach — after the Commerce Department said in May that it would supplant that Biden rule with its own 'bold, inclusive strategy.' But the draft measure is far from a comprehensive replacement, the people said. It doesn't answer, for example, questions about security conditions for the use of US chips in overseas data centres — a debate with particularly high stakes for the Middle East. It's unclear whether Trump officials may ultimately regulate AI chip shipments to a wider swath of countries, beyond the Malaysia and Thailand additions. The Commerce Department didn't respond to a request for comment. The agency has offered few specifics about its regulatory vision beyond what Secretary Howard Lutnick told lawmakers last month: The US will 'allow our allies to buy AI chips, provided they're run by an approved American data centre operator, and the cloud that touches that data center is an approved American operator,' he said during congressional testimony. Nvidia, the dominant maker of AI chips, declined to comment, while spokespeople for the Thai and Malaysian governments didn't respond. Nvidia Chief Executive Officer Jensen Huang has previously said there's 'no evidence' of AI chip diversion, in general remarks that didn't touch on any particular country. In response to earlier Bloomberg queries about curbs focused on smuggling risks, Thailand said it's awaiting details, while Malaysia's Ministry of Investment, Trade and Industry said clear and consistent policies are essential for the tech sector. Washington officials for years have debated which countries should be able to import American AI chips — and under what conditions. On one hand, the world wants Nvidia hardware, and US policymakers want the world to build AI systems using American technology — before China can offer a compelling alternative. On the other, once those semiconductors leave American and allied shores, US officials worry the chips could somehow make their way to China, or that Chinese AI companies could benefit from remote access to data centers outside the Asian country. Southeast Asia is a key focus. Companies including Oracle Corp are investing aggressively in data centres in Malaysia, and trade data shows that chip shipments there have surged in recent months. Under pressure from Washington, Malaysian officials have pledged to closely scrutinise those imports, but the Commerce Department's draft rule indicates the US still has concerns. Semiconductor sales to Malaysia also are a focal point of a court case in neighboring Singapore, where prosecutors have charged three men with defrauding customers about the ultimate destination of AI servers — originally shipped from the island nation to Malaysia — that may have contained advanced Nvidia chips. (Nvidia is not the subject of Singapore's investigation and has not been accused of any wrongdoing. The export curbs on Malaysia and Thailand would include several measures to ease pressure on companies with significant business operations there, people familiar with the matter said. One provision would allow firms headquartered in the US and a few dozen friendly nations to continue shipping AI chips to both countries, without seeking a license, for a few months after the rule is published, people familiar with the matter said. The license requirements also would still include certain exemptions to prevent supply chain disruptions, the people said. Many semiconductor companies rely on Southeast Asian facilities for crucial manufacturing steps like packaging, the process of encasing chips for use in devices.
Bangkok Post
3 days ago
- Bangkok Post
Ericsson touts development as data usage skyrockets
Ericsson predicts Thailand's consumption of data usage will soar from 35 gigabytes per month per subscription this year to 67GB by 2030, driven by streaming on the 5G network and a wave of innovations, especially generative artificial intelligence (AI) apps. To fully realise the potential of 5G, Ericsson urges operators to continue to deploy a 5G standalone (SA) network and build mid-band sites, said Anders Rian, head of Ericsson Thailand. Thailand is the leader in Southeast Asia for 5G penetration, comprising 25% of total mobile subscriptions last year thanks to its position as a 5G first mover in the region as well as the continuous growth of mobile broadband usage, noted the company. 5G subscriptions in Southeast Asia and Oceania are expected to reach 630 million by 2030, contributing around 49% of total mobile subscriptions in the region by then. Data traffic per smartphone is expected to grow from 19 GB/month in 2024 to 38 GB/month by 2030. In Thailand, 5G has become a significant driver of data consumption and increased average revenue per user. "We are at an inflection point, where 5G and the ecosystem are set to unleash a wave of innovation. The recent advancements in 5G SA networks, coupled with the progress in 5G-enabled devices, have led to an ecosystem poised to unlock transformative opportunities for connected creativity," Mr Rian said. He said the spectrum auction on June 29 was a positive move, ensuring the two major operators, Advanced Info Service and True Corporation, could further utilise those spectrum bands they landed at the auction. In the auction, AIS grabbed the 2100MHz, while True clinched the 2300MHz and the 1500MHz bands. AIS and True each has operated the 2100MHz and 2300MHz bands, respectively, through the partnerships with state enterprise National Telecom. The partnership expires in August this year. True is expected to utilise the 1500MHz band as a supplementary signal downlink to boost its network capability. Mr Rian said Ericsson Thailand believes the plan of the National Broadcasting and Telecommunication Commission to allocate 3500MHz is a must as it could efficiently optimise the 5G service. The 3500 MHz range is a key middle-band and the priority range for 5G adoption by mobile operators. Many countries in Europe provide 5G commercial service on the 3500MHz range. He added that the 3500MHz band would foster Thailand's competitiveness in the region, boosting network capability and performance as well as creating value by monetising fixed wireless access service for consumers and enterprises. "To fully realise the potential of 5G, it is essential to continue deploying 5G SA and to further build out mid-band sites," he added. He said as GenAI devices proliferate and AI apps become increasingly complex, both application service providers and communication service providers will need to focus more on uplink capabilities and latency. According to the Ericsson Mobility Report released in June, global 5G subscriptions are expected to reach 6.3 billion by the end of 2030 and 5G networks are forecast to handle 80% of global mobile traffic by the end of 2030.
Bangkok Post
3 days ago
- Bangkok Post
AI tie-up set to 'revolutionise' legal system
The Office of the Council of State (OCS) has partnered with Microsoft to leverage artificial intelligence (AI) to revolutionise Thailand's legal system. The move may facilitate Thailand's plan to become a member of the Organisation for Economic Co-operation and Development (OECD). In the long term, the council wants to empower people by providing them with accessible legal information and tools, fostering greater public understanding and preventing misleading information. The partnership launched the TH2OECD system, an AI-powered platform designed to help local officials navigate their way through OECD legal instruments and documents. "We are using AI as a crucial tool to modernise Thailand's legal system by analysing more than 70,000 Thai laws and more than 270 OECD legal instruments, as part of our efforts to join the OECD and enhance the country's global competitiveness," said Pakorn Nilprapunt, secretary-general of the OCS. Co-developed by OCS and Thai AI service provider STelligence on the Microsoft Azure OpenAI platform, the system boasts powerful capabilities in analysing and comparing more than 70,000 Thai laws with 270 OECD legal instruments in real time. The system supports bilingual processing in both Thai and English through automatic translation and leverages natural language processing (NLP) technology to detect legal discrepancies and recommend the fine-tuning of local content to be in line with the global legal standard. By significantly reducing language-related barriers and enabling precise legal assessments, the system should help legal officials finish legal harmonisation within six months, compared with an 8 to 10-year period estimated previously. "Human oversight is essential, and training the AI effectively requires input from experienced legal professionals," said Mr Pakorn. The OCS aspires to be a model for the development of AI-based legal translation systems and legal databases for countries where English is not an official language, he said. Mr Pakorn said the first phase of the project development cost 4 million baht. The OCS is entering the second phase with a budget of 11 million baht, focusing on creating a new legal search engine that can search through all Thai acts, royal decrees, and ministerial regulations. This internal system will also integrate OCS's own opinions on the law for deeper analysis. The OCS and Microsoft signed a memorandum of understanding with the Secretariat of the Cabinet to jointly develop and implement an AI-powered database and information platform to support the administration of Thailand's central government. "The technology should enable us to work more efficiently in providing advice to government policies that conflict with the law or help us amend laws more quickly," said Mr Pakorn. It is crucial that AI-generated legal recommendations are handled with extreme caution and precision to avoid inaccuracies that could cause confusion or conflict, he said. OCS advocates for "open government" and "open data" in the legal system, believing there is "nothing to hide", except for national security secrets. The OCS is also aiming for a single database for all legal information accessible to citizens, provided it respects privacy. Benefits of AI Jasmine Begum, regional director for legal & government affairs at Microsoft Asean, told the Bangkok Post that in Thailand OCS is recognised as being at the "forefront" of a progressive shift, moving away from analog policies to building digital frameworks from the ground up, aiming to create a future-proof legal system. Ms Begum said AI holds the potential to address three critical areas within the legal system. Firstly, it can make justice more accessible and expedite processes, a crucial benefit given the large volume of legislation and legal work involved. AI's capacity to process and analyse vast amounts of information can significantly speed up legal procedures and bridge existing gaps. Secondly, AI can be a powerful tool for legislative drafting. It helps to draft laws faster and ensures that new regulations do not conflict with existing ones. This analytical capability extends to helping with the analysis of outdated laws, potentially facilitating their review and reform. Finally, AI can improve access to justice by making complex regulations easier for the general public to understand. This demystification of legal language is vital for fostering greater public engagement and compliance. It necessitates a significant shift in the legal profession itself.
