Trust misuse is a failure mode where a system’s helpful, polite, or authoritative behavior causes people to rely on it more than they should. In cyber security, that trust can be exploited by phishing bots, fake support agents, or AI assistants that sound confident enough to persuade users to share passwords, approve actions, or disclose sensitive data. The attack often succeeds not by breaking encryption, but by abusing the user’s confidence in the interface.
This matters because many security decisions depend on human judgment. If a chatbot, help desk portal, or automated workflow appears credible, users may skip verification and accept unsafe guidance. Defenses include clear role boundaries, strong identity checks, least-privilege access, confirmation for risky actions, and escalation to a human when uncertainty or high impact is detected. In AI systems, explicit refusals and visible limits help prevent over-reliance and reduce harmful influence.