AI is optimizing and transforming cybercriminals’ tools, helping them craft more convincing lures, scale social engineering campaigns, and accelerate reconnaissance. Organizations are wise to pay attention to this trend, as existing security gaps are urgent proof of the need for cyber preparedness.

ESET, a leading company in proactive threat detection, asserts that the first points of failure remain familiar and typically involve: a phishing link clicked by an employee or a vulnerability that has not been patched in time. Unlike truly AI-driven malware (which remains rare), these threats continue to be among the most important for companies seeking to improve their preparedness.

“Fortunately, the threats that continue to cause the majority of incidents also have proven mitigation measures that can help keep your company secure,” says Mario Micucci, Cybersecurity Researcher at ESET Latin America.

According to the ESET SMB Cyber ​​Readiness Index 2026, “AI-driven malware” is identified as the top concern for SMEs globally for the coming year. In North America, the figure is even higher (33%). However, if this concept is understood as malware that uses AI in an automated, real-time manner, it is more of a topic for the research community than for cybersecurity professionals.

ESET discovered the first example of AI-written ransomware in 2025 and maintains that even in that case, it was likely a proof of concept (PoC). On the other hand, PromptSpy, discovered by ESET earlier this year, was the first known Android malware to use generative AI (GenAI) within its execution flow to achieve persistence.

“Threat researchers have made relatively few, if any, similar discoveries. Likewise, ESET’s MDR service has no evidence of incidents where generative AI played a significant role. Threat actors do benefit from AI support, but few are implementing this technology in real time for truly automated tasks,” the ESET researcher explains.

According to ESET, a more cost-effective approach for SMB leaders would be to pay closer attention to the root causes of incidents. In many SMEs, the first point of failure remains far more familiar: a phishing message that succeeds, an unpatched vulnerability, an alert that goes unnoticed, or a password that should never have been reused. These aren’t the most eye-catching cybersecurity risks, but they remain some of the most important for businesses looking to improve their preparedness and protection.

Top threats and risks for small businesses

• Phishing (26 %): ESET telemetry reveals that phishing was the most frequently detected threat during the second half of 2025 (30.8 %), and volumes continue to rise. Social engineering has always been a favorite tactic of threat actors, and both SMS phishing messages (smishing) and fraudulent phone calls (vishing) are gaining popularity. Technology can play a significant role in defense, but staff training and awareness are also critical and are often more difficult to implement correctly.
• Unpatched Security Vulnerabilities (23 %): Even the smallest organizations can operate a wide variety of software, and not everything can be kept up-to-date simply by turning on automatic updates. Understanding which systems are in operation and what critical data and assets might be exposed is the first challenge. The sheer volume and frequency with which new vulnerabilities are discovered today, coupled with the limited experience available to test and implement critical updates, can also represent significant obstacles.
• Lack of security oversight (22 %): You may have numerous security tools, but do you have a single, centralized place to collect, correlate, and highlight alerts? Effective monitoring is critical to accelerating threat detection and response. However, even companies that already have monitoring systems in place can be overwhelmed by the number of alerts, making it difficult to distinguish between false positives and real threats.
• Weak passwords (20 %): A security challenge as old as computing itself. Despite industry advancements toward phishing-resistant multi-factor authentication (MFA) and the use of passkeys, many organizations still rely on static passwords to protect their most important assets. Furthermore, employees often reuse them, increasing the risk of security breaches. Creating a strong password policy is the first step; enforcing it is the next.

Among the tried and tested solutions for common threats, ESET mentions that the key is recognizing that many of the aforementioned risks are exacerbated by AI, rather than this technology creating entirely new threats. For example, attackers are using AI to:

• Improve the quality of phishing messages (including the use of deepfakes) and scale and manage campaigns.
• Reduce the time needed to exploit vulnerabilities by quickly identifying and turning new flaws into attack tools.
• Analyze large volumes of data to identify frequently used passwords.
• Perform reconnaissance on targets to determine attack routes more quickly.

It can also reduce the time available for organizations to respond. If cybercriminals can identify vulnerable systems more quickly, develop exploit code more easily, or automate parts of their processes, the window between vulnerability disclosure, exploitation, and a successful attack could narrow even further. This is especially relevant for SMEs already struggling with asset inventory and patch prioritization. One of the key lessons is that neglecting the fundamentals increases the cost.

“The good news is that best practices remain effective for improving security posture. Vulnerability and patch management is a good starting point. Continuously scan operating systems and applications for known CVEs to identify exposures and then automatically deploy updates based on policies and risk level,” recommends Micucci.

Identity security is becoming increasingly critical. Password managers can generate and store strong, unique credentials for employees, but multi-factor authentication (MFA) is now an essential line of defense. Use privileged account management (PAM) tools to reduce the attack surface and protect high-risk accounts.

Address the shortage of specialized security personnel and improve monitoring by outsourcing detection and response to a trusted provider. Using a managed detection and response (MDR) service can also reduce the complexity and integration challenges that 21% of SMEs identify as their main barrier to improving their security posture.

“Ultimately, no organization is too small to become a target for an attack, so adopting a proactive approach to cybersecurity is essential. True cyber preparedness involves the ability to prevent, detect, and respond to threats — a fundamental milestone on the path to business resilience. And it can be achieved much faster by having a realistic view of the threats the organization faces. Not those that generate the most sensational headlines, but those that are causing real damage,” concludes Mario Micucci of ESET Latin America.

ESET invites you to learn more about cybersecurity by visiting:  https://www.welivesecurity.com/es/.

For other useful preventative information, also available in Venezuela at: https://www.eset.com/ve/, and on their social media channels @eset_ve. Also on Instagram  (@esetla) and Facebook (ESET).

Information and image provided by ESET and Comstat Rowland

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada SMEs must implement essentials to protect themselves from attacks and cyber threats apareció primero en Bitfinance.

An alleged attack on the Civil Defense alert system, based on Cell Broadcast technology, triggered the sending of false alerts to cell phones in various Brazilian cities, generating concern about the security of critical infrastructure used to protect the population.  ESET, a leading company in proactive threat detection, contextualizes the case and analyzes different protection strategies related to this type of system.

According to a report issued by the Brazilian Federal Government and sent to the Federal Police (PF), the first messages were sent to Rio de Janeiro. Subsequently, residents of Curitiba, Brasília, São Paulo, Salvador, and other locations also received notifications classified as “extreme alert,” considered the highest level in the Civil Defense alert system. This type of message is used in situations of imminent risk to life, requiring the population to take immediate protective measures.

In the case of Rio de Janeiro, the message referred to a supposed possibility of landslides, particularly sensitive information in a region historically affected by tragedies related to heavy rains. Messages also circulated mentioning a supposed possibility of a tornado in the Belo Horizonte region (MG) and other unfounded warnings. The texts contained disjointed phrases, corrupted fields, and unusual expressions, including references to a supposed “alien attack.”

The incident occurs at a time when Latin America is facing a sustained increase in extreme weather events. According to the World Meteorological Organization (WMO), in recent years the region has been affected by phenomena such as floods, droughts, hurricanes, and large-scale forest fires, reinforcing the importance of early warning systems to protect the population.

“In this context, several countries in the region are adopting alert systems based on Cell Broadcast, a technology that allows mass messaging to be sent to all mobile devices in a specific area, without the need for applications or an internet connection,” explains Jonathan Ramos, Cybersecurity Researcher at ESET Latin America.

Some implementation examples in the region include:

• Chile is the most established case, with its Emergency Alert System (SAE) fully operational and regularly used in the event of natural disasters, while Brazil already has large-scale mobile alert infrastructure, as evidenced in this incident.
• Mexico has conducted trials in recent years, partially integrating Cell Broadcast into its seismic alert system. Other countries, such as Ecuador, are in the initial or pilot stages.
• Argentina is making progress in deploying its national AlertAR system, based on this technology.

A compromised alert system can generate panic, misinformation, and diminish the credibility of official emergency communications

“As governments adopt more efficient technologies to alert the population, the attack surface on critical systems also increases. A compromised alert system can generate panic, misinformation, and eventually diminish the credibility of official communications in real emergency situations,” highlights Ramos from ESET.

One detail that stood out in this case was the repetition of the word “misanthropy” in various messages, functioning as a kind of signature left by those responsible. The term is used to describe people who express aversion, distrust, or rejection of humanity and social coexistence.

The case is being investigated by the National Civil Defense in conjunction with the National Telecommunications Agency (Anatel). The suspicion is that the incident involved unauthorized access to the Public Alert Dissemination Interface (Idap), a platform used by the Ministry of Integration and Regional Development (MIDR), with the support of the National Civil Defense, to send alerts related to risks of natural disasters and other emergencies.

In the first hours after the incident, a user identified as “Misantropo” on the social network X posted images and a video claiming responsibility for the messages. The disseminated material suggests the use of a government platform to send the alerts.

In an interview with the TecMundo website, the alleged attacker claimed to have used old Idap credentials that had been exposed in previous leaks. According to his account, access was obtained through a technique known as credential stuffing, which involves the automated reuse of username and password combinations previously compromised in other incidents.

“Although the perpetrators and details of the intrusion are still under investigation, the incident reinforces the importance of adopting robust authentication mechanisms, continuous monitoring, and periodic credential reviews in systems considered critical to public safety,” ESET added.

The authorities responded by temporarily deactivating the platform. In an official statement, the Civil Defense of the state of São Paulo reported that the message received by the public was not issued by the agency and that it immediately initiated verification procedures together with the National Civil Defense, Anatel (the Brazilian telecommunications regulator), and other institutions involved in the system’s operation. “To date, there is no record of any event that would justify issuing an extreme alert related to the reported content,” the agency stated.

“The incident highlights the risks associated with protecting government systems responsible for essential services. Cyber ​​incidents on critical infrastructure platforms expose vulnerabilities that transcend the technological sphere, revealing flaws in security policies and procedures. The use of supposedly leaked credentials reinforces the urgency of governance practices, such as the application of the principle of least privilege, mandatory multi-factor authentication (MFA), and the periodic rotation of passwords. For systems with high social impact, the implementation of the Four-Eyes Principle is indispensable. This validation layer mitigates the risk of isolated actions, whether malicious or accidental, preventing false alerts from generating panic and misinformation, and above all, preserving public trust in legitimate state protection mechanisms,” concludes Jonathan Ramos of ESET.

The investigation should clarify whether there was indeed an intrusion into the Civil Defense systems or if the incident was caused by the misuse of valid credentials obtained from previous leaks.

ESET invites you to learn more about cybersecurity by visiting:  https://www.welivesecurity.com/es/.

For other useful preventative information, also available in Venezuela at:  https://www.eset.com/ve/,, and on their social media channels @eset_ve. Also on Instagram (@esetla) and Facebook (ESET).

With information and images provided by ESET and Comstat Rowland

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada Automated alerts in Brazil with fake “extreme emergency” calls alarmed the population apareció primero en Bitfinance.

ESET, a leading company in proactive threat detection, presents the ESET Threat Report, its threat report for the first half of 2026, which summarizes trends in the threat landscape observed through ESET telemetry, as well as the perspectives of the company’s threat detection and research specialists (from December 2025 to May 2026). The report reveals how attackers continue to improve the efficiency and scalability of their operations, as, instead of relying on entirely new methods and tools, they are rapidly adapting established techniques to new platforms, technologies, and user behaviors.

Key findings from the report

• ClickFix — a social engineering technique that leverages fake error messages—has expanded into AI-themed help pages, browser extensions, and cloud authentication scenarios.
• QR code phishing — also known as “quishing”—has reached record levels in ESET telemetry.
• ESET analyzed nearly 900,000 AI skills — small functional components used by AI agents—and identified tens of thousands of suspicious instances and thousands of malicious ones. AI is also beginning to appear within malware.
• Ransomware showed no signs of slowing down, with its continued use of “EDR killers”—tools designed to disable security software during attacks.

Artificial intelligence is playing an increasingly important role. During the first half of 2026, ESET analyzed nearly 900,000 AI skills — small functional components used by AI agents — and identified 25,000 suspicious instances and more than 3,000 outright malicious instances. The number of AI skills within this emerging ecosystem is growing, expanding the attack surface.

AI is also beginning to appear within malware itself. Shortly after the emergence of the first AI-powered ransomware in 2025, the ESET research team identified PromptSpy, the first known Android malware to use generative AI in its execution flow. This malware leverages AI—specifically Google’s Gemini—to interpret user interface elements and adapt to different devices and environments without relying on hardcoded behaviors.

“Instead of resorting to entirely new methods and tools, attackers are rapidly adapting established techniques to new platforms, technologies, and user behaviors.” “The number of AI capabilities within this new ecosystem is growing rapidly right now, further expanding the attack surface,” says Jiří Kropáč, Director of ESET’s Threat Prevention Labs. “On the other hand, PromptSpy illustrates the potential for greater flexibility in future threats, although the abuse protection measures included in large language models (LLMs) are likely hindering its adoption,” Kropáč explains.

AI skills are small plugins or sets of instructions that tell an AI agent how to perform a specific task, including which services or tools to use and what data to access. The published report addresses details about malicious AI skills that use third-party hacking tools and a suspicious self-modifying skill designed to create a persistence mechanism (JSON file) and a tool for self-modification (Python code). This can lead to unpredictable agent behavior or its misuse by an attacker. Finally, there are benign but problematic skills, such as those marketed as security scanners, which create a false sense of security but only implement basic scanning techniques—like antivirus tools from the 1990s—or simply check the reputation of hashes, URLs, and IP addresses on VirusTotal.

Unique AI skills analyzed by ESET systems (per day, average of seven)

Meanwhile, ClickFix—a social engineering technique that leverages fake error messages—has expanded beyond bogus CAPTCHA requests to encompass AI-related help pages, browser extensions, and cloud authentication scenarios. AI-fix shows how attackers exploit trust in generative AI, embedding ClickFix compromise chains into AI-generated troubleshooting content for nonexistent issues on pages that abuse the domains of AI giants. ConsentFix highlights an evolution toward token theft, combining ClickFix-style interaction with OAuth authorization abuse to hijack cloud accounts without stealing credentials, often bypassing two-factor authentication (MFA) and relying entirely on legitimate login workflows. ESET’s detections of this vector more than doubled between the second half of 2025 and the first half of 2026, indicating sustained activity and constant adaptation.

Phishing campaigns are also evolving in response to user behavior. QR code phishing—also known as “quishing”—has reached record levels in ESET telemetry, with attackers embedding malicious links in QR codes to evade inspection and redirect user interaction to mobile devices, while exploiting the implicit trust many people place in barcodes with square patterns. Approximately 11 % of all phishing emails detected in the first half of 2026 used QR codes, with QR code phishing threats being most prevalent in the US (19 % of detections), Spain (17 %), and Mexico (6 %).

Finally, ransomware activity showed no signs of slowing down, with the continued use of “EDR killers” — tools designed to disable security software during attacks. ESET’s research team has documented more than 100 different EDR killers in circulation, and new variants appear regularly. The number of ransomware attacks continued to grow in the first half of 2026, but the number of victims willing to pay reached historic lows. Three recent industry reports confirmed this downward trend, indicating that between 14% and 28% of victims paid the ransom.

More information can be found at: https://www.welivesecurity.com/es/informes/eset-threat-report-informe-de-amenazas-primer-semestre-2026/

ESET invites you to learn more about cybersecurity by visiting https://www.eset.com/ve/ in Venezuela, and following them on social media @eset_ve. Also on Instagram (@esetla) and Facebook (ESET).

With information and reference image provided by ESET and Comstat Rowland

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada ESET releases its cyber threat report for the first half of 2026: AI has increased attacker efficiency apareció primero en Bitfinance.

It might sound exaggerated, but a large part of our lives revolves around our cell phones: photos, emails, online banking, social media, work, sensitive documents, conversations. That’s why ESET, a leading company in proactive threat detection, is sharing the steps to follow for a quick phone security check. This is extremely important for all users.

“In 10 minutes and with simple actions, you can detect risks, close unnecessary access points, and prevent problems before they occur. This significantly reduces the risk of your entire digital life becoming vulnerable,” explains Mario Micucci, Cybersecurity Researcher at ESET Latin America.

Minute 1–2: Update – The first step is to install available updates for both the operating system and the applications you use. It’s crucial to have the latest version installed because cybercriminals know how to exploit old vulnerabilities or weaknesses to carry out their attacks.

Minute 3: Lock – Activate device locking with a PIN, pattern, or biometric data. Ideally, avoid using common patterns or birthdates, and configure your screen to lock automatically as soon as possible. Physical access remains one of the simplest ways to compromise a device, since an unlocked cell phone allows anyone to access apps, emails, and social networks.

Minute 4: Delete – Review the list of installed applications and delete those you no longer use or recognize. Reducing the number of apps also reduces the entry points for cybercriminals.

Minute 5: Limit – Another important point regarding apps is to control the permissions they request. For example, does a flashlight app really need access to your contacts? You can check this in the “Settings” menu, then go to “Privacy,” and under “Permissions,” limit those you consider unnecessary or suspicious. According to ESET, the danger is clear: the microphone can listen to ambient noise, the camera can record without your knowledge, and location services can constantly track your movements.

Minute 6: Reduce – Decrease your attack surface by turning off Bluetooth when not in use and deleting saved public Wi-Fi networks. Both public Wi-Fi networks and active Bluetooth can be used by cybercriminals to intercept information or attempt unauthorized connections.

Minute 7: Enable – Activate two-factor authentication (2FA) on all possible accounts: email, WhatsApp, Instagram, Facebook, Google, Apple ID, etc. This prevents malicious actors from hijacking your account, stealing your networks and contacts, and accessing your banking services.

Minute 8-9: Back Up – It’s advisable to check if you have active backups (on Google Drive or iCloud), confirm when the last backup was performed, and enable automatic backups of photos, contacts, files, and system data if they aren’t already configured. Not all security incidents can be prevented. Backups are what allow you to recover your information, and if you don’t have a recent copy, the impact can be more severe.

Minute 10: Boost – Install a reliable security solution that provides protection against phishing sites and malicious apps, and detects malware in real time. Not all threats are visible: in fact, as users, we often don’t detect malicious links, dangerous apps, or suspicious behavior in time, and a security solution adds constant monitoring, reducing the margin for human error. ESET solutions, for example, include protection for online banking and payments, blocking of sensitive applications, and anti-theft tools to locate or lock your device in case of loss or theft.

“Cybersecurity isn’t about magic solutions, but about small habits that can make a big difference. This 10-minute security check is a step toward a better-protected device. Since most digital incidents occur due to minor oversights or carelessness (installing an unofficial app, not updating systems, a weak password), a good goal is to make this quick and concise check a daily habit. And thus, enjoy your digital life more safely,” concludes Micucci from ESET.

ESET invites you to learn more about cybersecurity by visiting: https://www.welivesecurity.com/es/

For other useful preventative information, also available in Venezuela:  https://www.eset.com/ve/, and on their social media channels @eset_ve. Also on Instagram (@esetla)  and Facebook (ESET).

Information provided by ESET and Comstat Rowland

Image source: Rodion Kutsaiev on Unsplash

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada Perform a quick security check on your phone in 10 minutes apareció primero en Bitfinance.

Mass-appeal events have become prime targets for global cybercrime. With the 2026 FIFA World Cup approaching, the cybersecurity company ESET Venezuela organized a specialized online event to analyze the main digital threats facing fans.

 During the session, experts shared and explained that collective enthusiasm and the urgency to obtain tickets or exclusive promotions often cloud users’ judgment. This psychological factor is exploited by attackers to carry out large-scale financial scams and identity theft.

 Most common frauds in online football

The technical presentation detailed that the most common types of fraud operate through:

Cloning websites dedicated to selling tickets.

Deceptive offers of travel packages and accommodations.

Furthermore, ESET analysts examined for participants how cybercriminals use social media, instant messaging applications, and fake websites. Using advanced social engineering techniques, attackers impersonate official sponsors to trick victims into downloading malicious applications, compromising their mobile devices and exposing their banking information.

Key digital security tips for the World Cup season

To mitigate this vulnerability, the ESET Venezuela team shared practical recommendations for maintaining safe browsing during the global event:

• Verify the authenticity of all links received.
• Avoid entering credentials or financial data on unofficial platforms.
• Be wary of raffles or prizes of dubious origin.

In this way, the company reaffirmed the need to adopt a digital security approach to fully enjoy the biggest football event without putting technological, personal, or corporate assets at risk.

To learn more about cybersecurity, visit the ESET website:  https://www.eset.com/ve/. You can also follow them on social media: Instagram @esetla) and Facebook (ESET).

Information and image courtesy of ESET and Comstat Rowland Strategic Communications

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada Experts analyze cyber scams related to the 2026 World Cup: Beware of a digital own goal apareció primero en Bitfinance.

The technological talent gap and the increase in digital threats are shaping the current pace of academic training. With this context in mind, ESET launched its University Tour at Monteávila University (UMA) and Andrés Bello Catholic University (UCAB). This series of free educational seminars on cybersecurity, taught by ESET Latin America specialists, is aimed at university students across Latin America.

The academic event featured David González, Security Researcher at ESET Latin America (Mexico), who explained the pillars of digital defense. “Within cybersecurity, we are guided by the information security triad: confidentiality (access only to authorized users), integrity (data not altered without permission), and availability (services accessible 24/7),” he explained.

Between the Red Team and the Blue Team

During the sessions, González issued a warning about the current job market: “There is a significant talent shortage. It is estimated that the lack of technical and operational cybersecurity professionals is between 4 and 5 million people globally.”

Given this reality, the specialist encouraged students to pursue specialization in areas such as databases, programming, and operating systems with a focus on security. He also highlighted that between 74 % and 80 % of experts are already focusing on Artificial Intelligence (AI) to train advanced threat detection models.

When detailing the dynamics between the Red Team (attack) and the Blue Team (defense), González emphasized the complexity of digital protection. “Defending is more difficult, since a cybercriminal only needs to find a single vulnerability or human error to compromise the entire strategy,” he noted. He also outlined entry-level roles in the job market—such as SOC analyst (anomaly monitoring), technical profiles (penetration testing), and managerial roles—and recommended fluency in English and obtaining certifications to diversify career paths.

Cultivating a culture of prevention from the ground up

For his part, José Luis Rangel, Commercial Manager of ESET Venezuela, emphasized the strategic importance of these talks for future professionals: “Our mission is to cultivate a culture of proactive prevention within academia,” he stated.

Likewise, Rangel highlighted the role that students will play in the short term: “These young people will lead the infrastructure of tomorrow. Alerting them to the reality of cyber threats and showing them the opportunities in this market is key to mitigating risks in the country.”

Hackathon 48–2026

As part of its commitment to innovation and young talent, ESET Venezuela complemented its training programs by participating as an official sponsor of the recent Hackathon 48–2026, a 48-hour event where entrepreneurs, developers, and designers come together to transform ideas into functional prototypes. This fosters innovation and collaboration, supporting the development of secure technological solutions in record time.

For more information on cybersecurity, visit the ESET website: https://www.eset.com/ve/. You can also follow them on social media: Instagram (@esetla) and Facebook (ESET).

With information and reference images provided by ESET and omstat Rowland, as well as archived images

Main reference image: Poddar Group of Institutions on Unsplash

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada ESET visits Caracas universities and warns of a shortage of 5 million cybersecurity experts apareció primero en Bitfinance.

ESET, the leading company in proactive threat detection, announced a €40 million investment in the future of AI-driven cybersecurity, as the company warns of a rapidly emerging new attack surface fueled by autonomous, agency-enabled AI systems.

The commitment — announced by ESET CEO Richard Marko at ESET World 2026 — comes in response to a shift ESET has observed in its own data. Since March 2026, ESET technologies have analyzed nearly 800,000 unique AI skills (modular components that instruct AI agents on how to perform tasks, use tools, access services, and interact with external systems). Approximately 25,000 of these skills were classified as suspicious, and more than 3,000 were blocked for being malicious.

This total represents a 13-fold increase compared to the approximately 60,000 publicly available skills observed earlier this year. According to ESET’s research team, AI skills are part of a rapidly growing layer in the software supply chain, often connecting sensitive systems to external repositories, plugins, datasets, and third-party services.

“Cybersecurity is entering a completely new era,” said Richard Marko, CEO of ESET. “Artificial intelligence is no longer just a defensive tool. It is becoming part of the attack surface itself. Our investment is focused on ensuring that AI strengthens cybersecurity rather than weakening it, and on developing technologies capable of protecting organizations in a world of autonomous AI.”

The initiative aims to strengthen ESET’s technological independence and European sovereignty in cybersecurity at a time when access to advanced artificial intelligence systems is increasingly concentrated in the hands of a small number of global technology companies. “We believe that the future of cybersecurity cannot depend entirely on models controlled by large technology companies,” added Marko.

“In cybersecurity, sovereignty matters”

Backed by a three-year recruitment plan that will grow ESET’s R&D team to 1,000 dedicated research and engineering professionals, the €40 million investment will focus on three strategic areas:

• Independent, security-priority core AI models
• A comprehensive, layered AI security architecture
• The next-generation AI SOC

“ESET has long been at the forefront of applying AI to cybersecurity,” said Juraj Jánošík, Vice President of Artificial Intelligence at ESET. “What is changing now is the role that AI plays.” AI tools are becoming part of everyday work, autonomous systems are expanding the attack surface, and security teams need faster ways to respond to threats. This investment allows us to work across the spectrum: protecting the use of AI, building AI models for cybersecurity, and incorporating autonomous capabilities into security operations under human supervision.”

Standard, security-priority AI models

ESET will accelerate the development of its own security-centric AI models, designed specifically for cybersecurity applications. Unlike general-purpose AI systems trained on broad internet content, ESET’s models will be optimized using cybersecurity telemetry and real-world threat intelligence gathered over ESET’s nearly 35-year history.

The company will continue to expand its existing AI-powered technologies (such as ESET LiveGrid, ESET LiveCortex, and ESET LiveGuard) while exploring emerging AI concepts, including “World Models” capable of understanding behavior, context, and intent within digital environments.

Design, development, and implementation of a comprehensive, layered AI security architecture

As AI becomes more integrated into everyday business operations, ESET is developing a comprehensive, AI-native security architecture designed to protect organizations against emerging AI-driven risks and threats. The investment will include the development of ESET Secure AI Relay, a secure intermediary layer between users, AI agents, business applications, and AI models.

The leading cybersecurity company will also develop network-level safeguards and protections for communication between AI agents. ESET AI Skills Checker (a free tool launched at the RSAC 2026 conference), along with its enhanced versions integrated into ESET products, was specifically designed for this emerging ecosystem of agent-based AI systems.

Building the Next Generation AI SOC

A new generation of AI-powered Security Operations Center (SOC) technologies will be designed to address the increasing scale and complexity of modern detection and response environments. Instead of simply replacing analysts with AI agents, ESET aims to fundamentally rethink how cybersecurity telemetry is processed, correlated, and understood. The company’s vision is to make advanced AI-powered cybersecurity accessible not only to large enterprises but also to small and medium-sized organizations through supervised and highly automated protection technologies.

“Cybersecurity cannot grow simply by adding more alerts, more dashboards, and more complexity,” added Marko. “The industry needs to take another major leap forward. We believe that artificial intelligence should help make world-class cybersecurity simple and accessible to everyone.”

To learn more about ESET solutions, visit: https://www.eset.com/latam/empresas/protect-platform/ and/or simply https://www.eset.com/latam/

ESET invites you to delve deeper into cybersecurity by visiting: https://www.welivesecurity.com/es/.

For useful preventative information and details on services and products, visit https://www.eset.com/ve/ and their social media channels @eset_ve. You can also find them on Instagram (@esetla) and Facebook (ESET).

Information and images courtesy of ESET and Comstat Rowland Strategic Communications

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada ESET to invest €40 million in AI to counter the rise of sophisticated attacks apareció primero en Bitfinance.

The radical transformation of digital crime has forced corporations to abandon static security schemes. In response to this situation, the fifteenth edition of ESET Security Day, one of the most significant annual technology events held in the Venezuelan capital, took place to showcase the new cybersecurity paradigm, where attacks have ceased to be isolated incidents and have become automated operations enhanced by Artificial Intelligence (AI) tools.

Michele Flammia, General Manager of ESET Venezuela, highlighted the value of these informative forums for protecting the region’s business ecosystem. During the event, the brand’s specialists demonstrated, through a live simulation, how modern groups operate and how technologies such as XDR (Extended Detection and Response) and threat intelligence allow for action before the impact materializes.

Innovation in response and strategic advantages

Camila Oliveira, Channel Manager of ESET LATAM (currently based in the regional office in Argentina), addressed cybersecurity as a competitive advantage, inspired by Stephen Covey’s bestseller, The 7 Habits of Highly Effective People. During his presentation, he detailed the capabilities of the continuous training programs (AARNES) and the value of the managed detection service:

“We want companies to understand that technology and cybersecurity are not an expense, but an investment. ESET’s Managed Detection and Response (MDR) service has the shortest detection time on the market. Competitors use this technology differently, as they don’t offer 24/7 support and their response times are longer,” Oliveira emphasized.

The democratization of attacks through Artificial Intelligence

David González, Security Researcher at ESET Mexico, delivered a keynote address on the impact of generative AI models since the arrival of ChatGPT, a platform that has already reached 400 million users. The expert warned that this widespread adoption has led to a dangerous reduction in the technical barrier for criminals:

“In the cybercriminal world, we are witnessing a democratization of capabilities. It is no longer necessary to possess advanced technical knowledge to carry out an attack; AI allows for the generation of malicious code or the compromise of organizations in a matter of minutes. Time is working against the defenders,” González warned. Given this, he urged organizations to adopt the Diamond Model to dynamically analyze four key aspects of the adversary: ​​infrastructure, capabilities (such as zero-day exploits), victims, and the attacker’s motivations.

An unprotected market against autonomous attacks

For his part, José Luis Rangel, Commercial Manager of  ESET Venezuela warned about the growing interest of digital criminal organizations in targeting critical sectors such as healthcare, energy, and telecommunications using autonomous AI agents. Rangel posed a direct question to the companies and attendees: “What are you doing? It is important that we consider what the organization is doing to prepare before an attack occurs.”

Finally, Carlos López, Pre-Sales Manager at ESET Venezuela, provided critical metrics on corporate neglect in the face of technological evolution over the last 15 years. He explained that between 35 % and 37 % of companies lack basic defenses, and only 41 % have proactive detection and response capabilities.

In addition, 39 % of firms do not have a defined policy for the use of artificial intelligence, which facilitates data breaches. The regional situation reflects that one in four organizations in Latin America does not implement basic security measures, 51 % report having suffered incidents, and it is estimated that an attack occurs every 39 seconds globally.

The speakers emphasized that companies can no longer rely on reactive solutions, which compels corporate leaders to become directly involved in cyber defense and adopt advanced visibility tools to neutralize threats before suffering irreversible financial impacts.

For more information, visit the ESET website: https://www.eset.com/ve/. You can also follow them on social media: Instagram (@esetla) and Facebook (ESET).

Thanks to on-site coverage, more information from ESET and Comstat Rowland Comunicaciones Estratégicas Integrales.

Audiovisual production: Jesús Ramírez

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada ESET Security Day Venezuela: Experts reveal that one-third of companies lack basic protection apareció primero en Bitfinance.

An analysis conducted in late 2025 by ESET, a leading company in proactive threat detection, highlighted the evolution of ransomware (data kidnapping) as one of trends to watch closely in 2026. This first quarter of the year confirms its importance, and the cybersecurity company analyzes the most attacked industries, which countries were most affected, the situation in Latin America, and the incidence of each group.

Topics of paramount importance and interest to both experts and cautious users who follow these incidents.

According to the ransomware.live report, the three groups that dominated the first quarter of the year were Qilin, The Gentlemen, and Akira, which together accounted for almost 900 victims, representing more than 30% of the total attacks (approximately 2,200).

Qilin ransomware took first place with more than 400 attacks during the quarter. This ransomware-as-a-Service (RaaS) group, which also held this position last year, took the professionalization of cybercrime to a new level, so to speak, by providing legal counsel to its affiliates to strengthen their leverage during ransom negotiations.

Second place, with almost 250 attacks, went to The Gentlemen. This RaaS group represents a new era: it is moving away from mass attacks to focus on tailored operations. A silent and far more dangerous model, according to ESET, that redefines the rules of the game with targeted and adaptive campaigns.

Akira completed this negative podium, with more than 200 attacks to its name, many in Latin America. Its spread was so widespread that it even put major cybersecurity agencies around the world on alert, including the FBI.

Regarding the industries most affected by ransomware during the first three months of 2026, ESET found the manufacturing, technology, and healthcare sectors to be the most impacted. Following closely behind were business services, construction, and financial services.

“What is clear is that cyber attackers do not choose their victims randomly, but rather seek out organizations where they can generate a strong impact or sense of urgency, whether due to the immediate need to have their systems available, because they cannot afford long operational downtime, or because they handle critical or sensitive information. Ransomware groups continue to focus on economic and reputational impact, targeting industries undergoing digitalization but demonstrating less maturity in cybersecurity,” says Mario Micucci, Cybersecurity Researcher at ESET Latin America.

Internationally, with more than 1,000 attacks recorded, the United States was the country most affected by ransomware during the first quarter of 2026. The countries that followed recorded only 100 attacks or fewer, such as Germany, Great Britain, and France. Canada completed the top five affected countries.

Regarding Latin America, Brazil (50 attacks) and Mexico (30) were the most affected countries, but incidents were also recorded in Argentina, Chile, Peru, Paraguay, Ecuador, Venezuela, Colombia, Guatemala, Panama, and the Dominican Republic

The first quarter of 2026 confirms the trend that ransomware is not a temporary or declining threat, but a consolidated and constantly evolving phenomenon. “The combination of highly active groups, new emerging actors, and increasingly targeted attacks demonstrates that the model remains profitable for cyber attackers. Looking ahead, the focus should be on how organizations can strengthen their prevention, detection, and response capabilities, especially in critical sectors and regions where cybersecurity maturity still has significant gaps,” concludes Micucci of ESET.

For more information on this topic, please visit: https://www.welivesecurity.com/es/ransomware/actividad-ransomware-primer-trimestre-2026/.

Additionally, for other useful preventative information, visit https://www.eset.com/ve/ in Venezuela, and follow them on social media @eset_ve, Instagram (@esetla), and Facebook (ESET).

With information and image reference ​​provided by ESET and Comstat Rowland

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada Manufacturing, technology, and healthcare organizations: Industries most affected by ransomware in 2026 apareció primero en Bitfinance.

In a digital environment where threats are relentless, national productive sectors face a critical scenario: an attempted cyber intrusion every minute. Given this reality, analyzed by ESET Venezuela experts during their 7th Technology Breakfast for Journalists, data protection has ceased to be a technical option and has become a priority for economic survival.

Today, efficient risk management and the adoption of global standards are the only barriers capable of preventing a complete business shutdown.

During this high-level meeting, emerging trends that are redefining the protection of digital assets were explored. Special emphasis was placed on how local organizations must adapt their infrastructures in the face of the increase in sophisticated attacks that jeopardize operations and data integrity in an increasingly interconnected and demanding ecosystem.

Michele Flammia, General Manager of ESET Venezuela, welcomed attendees, highlighting the brand’s commitment to digital education and protecting strategic assets against current challenges.

Alarming figures that drive proactive action

Carlos López Rodríguez, the company’s Support and Training Manager, emphasized that cybersecurity must be viewed as an ongoing process: “Prevention and training cost less than stopping an attack once it has begun.” He also emphasized that certifications and work on control frameworks provide a real guarantee to third parties and clients.

For his part, José Luis Rangel, Commercial Manager of ESET, warned about the lack of visibility in the market: “Almost 40 % of companies don’t know if they are currently being compromised or if they were in the past.”

According to experts, a cyberattack occurs worldwide every 39 seconds, making it a statistically more likely threat than a fire. The economic impact of this operational paralysis can be reduced by up to 97% with adequate investment in training and frameworks such as ISO 27001 or NIST.

The human factor and social engineering

Martina López, a cybersecurity researcher at ESET Latin America, highlighted that social engineering remains the primary entry point for criminals. Using techniques like quishing (QR phishing) and dynamic phishing, attackers exploit the sense of urgency and trust of employees. In the country, the most frequently impersonated entities include DocuSign, MetaMask, and the Telegram platform, taking advantage of peak interest in AI tools and the current national situation.

Key recommendations for resilience

To strengthen defenses, specialists suggest three fundamental pillars:

• Tabletop Drills: Practicing crisis scenarios allows for the identification of weaknesses in response protocols before a real disaster occurs.
• Real Certification: Obtaining third-party endorsements that validate international standards provides real trust and security to clients.
• Device Security: Disable notifications on the lock screen to prevent the theft of passwords or credentials and always enable two-factor authentication (2FA).

Cybersecurity requires operational maturity; it is contradictory to fear quantum computing while working with obsolete systems. As López concluded, “training and practicing will always cost less than stopping a cyber intruder’s operation once it has begun.”

Video coverage with more details

For more information, visit the ESET website: https://www.eset.com/ve/. Also, follow them on social media: Instagram (@esetla) and Facebook (ESET).

Through on-site coverage and information from ESET and Comstat Rowland Comunicaciones Estratégicas Integrales

Audiovisual production: Ida Febres

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada ESET Venezuela: A cyberattack occurs every 39 seconds; prevention reduces downtime costs by up to 97 % apareció primero en Bitfinance.