Mass-appeal events have become prime targets for global cybercrime. With the 2026 FIFA World Cup approaching, the cybersecurity company ESET Venezuela organized a specialized online event to analyze the main digital threats facing fans.

 During the session, experts shared and explained that collective enthusiasm and the urgency to obtain tickets or exclusive promotions often cloud users’ judgment. This psychological factor is exploited by attackers to carry out large-scale financial scams and identity theft.

 Most common frauds in online football

The technical presentation detailed that the most common types of fraud operate through:

Cloning websites dedicated to selling tickets.

Deceptive offers of travel packages and accommodations.

Furthermore, ESET analysts examined for participants how cybercriminals use social media, instant messaging applications, and fake websites. Using advanced social engineering techniques, attackers impersonate official sponsors to trick victims into downloading malicious applications, compromising their mobile devices and exposing their banking information.

Key digital security tips for the World Cup season

To mitigate this vulnerability, the ESET Venezuela team shared practical recommendations for maintaining safe browsing during the global event:

• Verify the authenticity of all links received.
• Avoid entering credentials or financial data on unofficial platforms.
• Be wary of raffles or prizes of dubious origin.

In this way, the company reaffirmed the need to adopt a digital security approach to fully enjoy the biggest football event without putting technological, personal, or corporate assets at risk.

To learn more about cybersecurity, visit the ESET website:  https://www.eset.com/ve/. You can also follow them on social media: Instagram @esetla) and Facebook (ESET).

Information and image courtesy of ESET and Comstat Rowland Strategic Communications

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada Experts analyze cyber scams related to the 2026 World Cup: Beware of a digital own goal apareció primero en Bitfinance.

ESET, the leading company in proactive threat detection, announced a €40 million investment in the future of AI-driven cybersecurity, as the company warns of a rapidly emerging new attack surface fueled by autonomous, agency-enabled AI systems.

The commitment — announced by ESET CEO Richard Marko at ESET World 2026 — comes in response to a shift ESET has observed in its own data. Since March 2026, ESET technologies have analyzed nearly 800,000 unique AI skills (modular components that instruct AI agents on how to perform tasks, use tools, access services, and interact with external systems). Approximately 25,000 of these skills were classified as suspicious, and more than 3,000 were blocked for being malicious.

This total represents a 13-fold increase compared to the approximately 60,000 publicly available skills observed earlier this year. According to ESET’s research team, AI skills are part of a rapidly growing layer in the software supply chain, often connecting sensitive systems to external repositories, plugins, datasets, and third-party services.

“Cybersecurity is entering a completely new era,” said Richard Marko, CEO of ESET. “Artificial intelligence is no longer just a defensive tool. It is becoming part of the attack surface itself. Our investment is focused on ensuring that AI strengthens cybersecurity rather than weakening it, and on developing technologies capable of protecting organizations in a world of autonomous AI.”

The initiative aims to strengthen ESET’s technological independence and European sovereignty in cybersecurity at a time when access to advanced artificial intelligence systems is increasingly concentrated in the hands of a small number of global technology companies. “We believe that the future of cybersecurity cannot depend entirely on models controlled by large technology companies,” added Marko.

“In cybersecurity, sovereignty matters”

Backed by a three-year recruitment plan that will grow ESET’s R&D team to 1,000 dedicated research and engineering professionals, the €40 million investment will focus on three strategic areas:

• Independent, security-priority core AI models
• A comprehensive, layered AI security architecture
• The next-generation AI SOC

“ESET has long been at the forefront of applying AI to cybersecurity,” said Juraj Jánošík, Vice President of Artificial Intelligence at ESET. “What is changing now is the role that AI plays.” AI tools are becoming part of everyday work, autonomous systems are expanding the attack surface, and security teams need faster ways to respond to threats. This investment allows us to work across the spectrum: protecting the use of AI, building AI models for cybersecurity, and incorporating autonomous capabilities into security operations under human supervision.”

Standard, security-priority AI models

ESET will accelerate the development of its own security-centric AI models, designed specifically for cybersecurity applications. Unlike general-purpose AI systems trained on broad internet content, ESET’s models will be optimized using cybersecurity telemetry and real-world threat intelligence gathered over ESET’s nearly 35-year history.

The company will continue to expand its existing AI-powered technologies (such as ESET LiveGrid, ESET LiveCortex, and ESET LiveGuard) while exploring emerging AI concepts, including “World Models” capable of understanding behavior, context, and intent within digital environments.

Design, development, and implementation of a comprehensive, layered AI security architecture

As AI becomes more integrated into everyday business operations, ESET is developing a comprehensive, AI-native security architecture designed to protect organizations against emerging AI-driven risks and threats. The investment will include the development of ESET Secure AI Relay, a secure intermediary layer between users, AI agents, business applications, and AI models.

The leading cybersecurity company will also develop network-level safeguards and protections for communication between AI agents. ESET AI Skills Checker (a free tool launched at the RSAC 2026 conference), along with its enhanced versions integrated into ESET products, was specifically designed for this emerging ecosystem of agent-based AI systems.

Building the Next Generation AI SOC

A new generation of AI-powered Security Operations Center (SOC) technologies will be designed to address the increasing scale and complexity of modern detection and response environments. Instead of simply replacing analysts with AI agents, ESET aims to fundamentally rethink how cybersecurity telemetry is processed, correlated, and understood. The company’s vision is to make advanced AI-powered cybersecurity accessible not only to large enterprises but also to small and medium-sized organizations through supervised and highly automated protection technologies.

“Cybersecurity cannot grow simply by adding more alerts, more dashboards, and more complexity,” added Marko. “The industry needs to take another major leap forward. We believe that artificial intelligence should help make world-class cybersecurity simple and accessible to everyone.”

To learn more about ESET solutions, visit: https://www.eset.com/latam/empresas/protect-platform/ and/or simply https://www.eset.com/latam/

ESET invites you to delve deeper into cybersecurity by visiting: https://www.welivesecurity.com/es/.

For useful preventative information and details on services and products, visit https://www.eset.com/ve/ and their social media channels @eset_ve. You can also find them on Instagram (@esetla) and Facebook (ESET).

Information and images courtesy of ESET and Comstat Rowland Strategic Communications

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada ESET to invest €40 million in AI to counter the rise of sophisticated attacks apareció primero en Bitfinance.

The radical transformation of digital crime has forced corporations to abandon static security schemes. In response to this situation, the fifteenth edition of ESET Security Day, one of the most significant annual technology events held in the Venezuelan capital, took place to showcase the new cybersecurity paradigm, where attacks have ceased to be isolated incidents and have become automated operations enhanced by Artificial Intelligence (AI) tools.

Michele Flammia, General Manager of ESET Venezuela, highlighted the value of these informative forums for protecting the region’s business ecosystem. During the event, the brand’s specialists demonstrated, through a live simulation, how modern groups operate and how technologies such as XDR (Extended Detection and Response) and threat intelligence allow for action before the impact materializes.

Innovation in response and strategic advantages

Camila Oliveira, Channel Manager of ESET LATAM (currently based in the regional office in Argentina), addressed cybersecurity as a competitive advantage, inspired by Stephen Covey’s bestseller, The 7 Habits of Highly Effective People. During his presentation, he detailed the capabilities of the continuous training programs (AARNES) and the value of the managed detection service:

“We want companies to understand that technology and cybersecurity are not an expense, but an investment. ESET’s Managed Detection and Response (MDR) service has the shortest detection time on the market. Competitors use this technology differently, as they don’t offer 24/7 support and their response times are longer,” Oliveira emphasized.

The democratization of attacks through Artificial Intelligence

David González, Security Researcher at ESET Mexico, delivered a keynote address on the impact of generative AI models since the arrival of ChatGPT, a platform that has already reached 400 million users. The expert warned that this widespread adoption has led to a dangerous reduction in the technical barrier for criminals:

“In the cybercriminal world, we are witnessing a democratization of capabilities. It is no longer necessary to possess advanced technical knowledge to carry out an attack; AI allows for the generation of malicious code or the compromise of organizations in a matter of minutes. Time is working against the defenders,” González warned. Given this, he urged organizations to adopt the Diamond Model to dynamically analyze four key aspects of the adversary: ​​infrastructure, capabilities (such as zero-day exploits), victims, and the attacker’s motivations.

An unprotected market against autonomous attacks

For his part, José Luis Rangel, Commercial Manager of  ESET Venezuela warned about the growing interest of digital criminal organizations in targeting critical sectors such as healthcare, energy, and telecommunications using autonomous AI agents. Rangel posed a direct question to the companies and attendees: “What are you doing? It is important that we consider what the organization is doing to prepare before an attack occurs.”

Finally, Carlos López, Pre-Sales Manager at ESET Venezuela, provided critical metrics on corporate neglect in the face of technological evolution over the last 15 years. He explained that between 35 % and 37 % of companies lack basic defenses, and only 41 % have proactive detection and response capabilities.

In addition, 39 % of firms do not have a defined policy for the use of artificial intelligence, which facilitates data breaches. The regional situation reflects that one in four organizations in Latin America does not implement basic security measures, 51 % report having suffered incidents, and it is estimated that an attack occurs every 39 seconds globally.

The speakers emphasized that companies can no longer rely on reactive solutions, which compels corporate leaders to become directly involved in cyber defense and adopt advanced visibility tools to neutralize threats before suffering irreversible financial impacts.

For more information, visit the ESET website: https://www.eset.com/ve/. You can also follow them on social media: Instagram (@esetla) and Facebook (ESET).

Thanks to on-site coverage, more information from ESET and Comstat Rowland Comunicaciones Estratégicas Integrales.

Audiovisual production: Jesús Ramírez

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada ESET Security Day Venezuela: Experts reveal that one-third of companies lack basic protection apareció primero en Bitfinance.

In a digital environment where threats are relentless, national productive sectors face a critical scenario: an attempted cyber intrusion every minute. Given this reality, analyzed by ESET Venezuela experts during their 7th Technology Breakfast for Journalists, data protection has ceased to be a technical option and has become a priority for economic survival.

Today, efficient risk management and the adoption of global standards are the only barriers capable of preventing a complete business shutdown.

During this high-level meeting, emerging trends that are redefining the protection of digital assets were explored. Special emphasis was placed on how local organizations must adapt their infrastructures in the face of the increase in sophisticated attacks that jeopardize operations and data integrity in an increasingly interconnected and demanding ecosystem.

Michele Flammia, General Manager of ESET Venezuela, welcomed attendees, highlighting the brand’s commitment to digital education and protecting strategic assets against current challenges.

Alarming figures that drive proactive action

Carlos López Rodríguez, the company’s Support and Training Manager, emphasized that cybersecurity must be viewed as an ongoing process: “Prevention and training cost less than stopping an attack once it has begun.” He also emphasized that certifications and work on control frameworks provide a real guarantee to third parties and clients.

For his part, José Luis Rangel, Commercial Manager of ESET, warned about the lack of visibility in the market: “Almost 40 % of companies don’t know if they are currently being compromised or if they were in the past.”

According to experts, a cyberattack occurs worldwide every 39 seconds, making it a statistically more likely threat than a fire. The economic impact of this operational paralysis can be reduced by up to 97% with adequate investment in training and frameworks such as ISO 27001 or NIST.

The human factor and social engineering

Martina López, a cybersecurity researcher at ESET Latin America, highlighted that social engineering remains the primary entry point for criminals. Using techniques like quishing (QR phishing) and dynamic phishing, attackers exploit the sense of urgency and trust of employees. In the country, the most frequently impersonated entities include DocuSign, MetaMask, and the Telegram platform, taking advantage of peak interest in AI tools and the current national situation.

Key recommendations for resilience

To strengthen defenses, specialists suggest three fundamental pillars:

• Tabletop Drills: Practicing crisis scenarios allows for the identification of weaknesses in response protocols before a real disaster occurs.
• Real Certification: Obtaining third-party endorsements that validate international standards provides real trust and security to clients.
• Device Security: Disable notifications on the lock screen to prevent the theft of passwords or credentials and always enable two-factor authentication (2FA).

Cybersecurity requires operational maturity; it is contradictory to fear quantum computing while working with obsolete systems. As López concluded, “training and practicing will always cost less than stopping a cyber intruder’s operation once it has begun.”

Video coverage with more details

For more information, visit the ESET website: https://www.eset.com/ve/. Also, follow them on social media: Instagram (@esetla) and Facebook (ESET).

Through on-site coverage and information from ESET and Comstat Rowland Comunicaciones Estratégicas Integrales

Audiovisual production: Ida Febres

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada ESET Venezuela: A cyberattack occurs every 39 seconds; prevention reduces downtime costs by up to 97 % apareció primero en Bitfinance.

At Bancamiga, cybersecurity is a core pillar of business continuity and its reputation. In an ecosystem where trust is the most valuable asset, protecting data integrity is a strategic business imperative.

For Sergio Saggese, Executive Director of Technology, Processes, and Information Security at Bancamiga, digital transformation is a change in business models and a necessity to compete in today’s markets. However, the accelerated pace of digital transformation has broadened the scope of exposure to cyberattacks. These attacks are perpetrated in a highly sophisticated manner, primarily aimed at blocking critical operations to demand ransoms, using techniques that employ Artificial Intelligence to emulate voices or legitimate banking platforms.

During the conference “Managing the Digital Age: Cybersecurity Implications for Businesses,” delivered this Wednesday to students at Monteávila University, Saggese stated that attacks occur daily and companies must protect themselves. It is essential to understand that there are threats and what those threats are.

“Cybercrime takes advantage of human error, whether by action or omission, misconfigurations, and vulnerable code. There are targeted attacks that utilize third-party connections and interconnected devices, which serve as entry points to internal networks. A chain is only as strong as its weakest link,” he indicated.

He expressed that digital transformation is inevitable to offer agile, personalized, and competitive services that are securely structured from the design stage on four pillars: cloud adoption, AI, the Internet of Things, and data analytics.

For Bancamiga’s CEO, Sergio Saggese, the question today isn’t “whether we will be attacked,” but rather “how quickly will we detect, respond to, and recover from an attempted attack?”

To protect an organization, it’s necessary to shift from a reactive approach to a proactive and defensive stance. The starting point should be “never trust, always verify.” Every access request, whether from inside or outside the network, must be constantly authenticated, authorized, and validated. Continuous training for employees and partners, with content tailored to the customer experience, is also key. It’s essential to strengthen monitoring capabilities and prepare for the moment of an attack.

Saggese maintained that there must be a comprehensive and holistic process for managing cybersecurity, and this is where the focus on cyber resilience —an organization’s ability to anticipate, resist, confront, and recover from adverse cyberattacks— becomes crucial.

“It’s about strengthening the company’s capacity to resist and respond. Cybersecurity isn’t just about resisting, but about navigating the storm.”

The conference attendees, mostly first-year engineering students, expressed their gratitude with words and applause for the concepts presented by Saggese, recognizing their contribution to their holistic development.

Information and images provided by Bancamiga Banco Universal                        

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada Sergio Saggese: Cybersecurity is a fundamental pillar of business continuity apareció primero en Bitfinance.

The Gentlemen ransomware attacked more than 250 victims in 17 countries, including Mexico, Colombia, Chile, and Argentina, and represents a new era of customized and ultra-adaptive attacks. Unlike other groups, this Ransomware as a Service (RaaS) studies the specific defenses of its victims and adapts its tools during the campaign to overcome existing controls. ESET, a leading company in proactive threat detection, analyzes the new landscape of ransomware groups and warns how this disciplined, meticulous, and highly methodical organization has disrupted traditional approaches to become one of the most active threats since July 2025.

“It is an emerging Ransomware-as-a-Service group that burst onto the cybercrime scene in mid-2025. Unlike other groups with more sloppy or rustic aesthetics, The Gentlemen stands out for its polished brand identity. It even maintains a leak site on the dark web with a professional logo and a slogan that reinforces its image as a disciplined and highly detail-oriented organization. This professionalism is not merely aesthetic; it is reflected in the precision of its attacks and the technical quality of its tools,” says Martina Lopez, cybersecurity researcher at ESET Latin America.

Their operating model is based on double extortion, a tactic where they not only encrypt the victim’s files to block access, but also exfiltrate confidential data before encryption. Once they possess the information, they threaten to publish it on their leaks site if a ransom is not paid. This strategy puts massive pressure on companies, especially those that cannot afford a public data breach.

A ransomware attack by The Gentlemen typically begins by exploiting exposed internet access points (systems with open administration) or using previously stolen credentials. Once inside, they deploy tools to scan the internal network, understand how the company is organized, and identify users with elevated privileges, especially those with full access to the systems.

To move within the network and escalate the attack, they use tools that allow them to remotely execute actions on multiple computers and modify key configurations. In this way, they manage to distribute the ransomware simultaneously across all connected devices, further weakening security mechanisms to facilitate remote access and control.

In the final stage, they combine two critical actions: first, they steal sensitive information and send it to external servers in encrypted form; second, they lock down systems using encryption. Once the attack is complete, they execute processes designed to erase their tracks: they delete activity logs, remote connections, and any evidence that could allow them to reconstruct what happened, thus hindering subsequent investigations.

Their first documented victim was registered on June 30, 2025, and since then, their activity has not ceased. They have affected critical sectors such as manufacturing, construction, healthcare, insurance, and financial services.

Geographically, their impact is global, but the most affected countries include the United States and Thailand, followed by India, Mexico, Colombia, Spain, and France. This distribution suggests that the group takes advantage of access opportunities wherever they arise, without an apparent geopolitical agenda.

In mid-March 2026, they published on their website the attack on two organizations in Colombia in the healthcare and media sectors. During February, they attacked a government scientific research institute in Argentina, and in March, they claimed responsibility for an attack on an organization in Chile. According to the ransomware.live website, they also reported victims in Brazil, Peru, Ecuador, Venezuela, Guatemala, the Dominican Republic, Costa Rica, and Panama.

ESET provides the following list of recommendations to protect yourself from The Gentlemen ransomware:

• Reduce internet exposure: review which systems are accessible from outside and close any unnecessary access, especially administration panels or remote access.
• Protect credentials: use unique and strong passwords, enable two-factor authentication, and monitor any suspicious logins.
• Keep everything up to date: apply security patches to operating systems, servers, and applications. Many of their intrusions exploit known vulnerabilities.
• Detect anomalous behavior: Implement solutions that allow you to identify unusual activity within the network, such as after-hours access or unexpected remote executions.
• Limit privileges: Not all users need full access. Reducing permissions minimizes the impact if an account is compromised.
• Segment the network: Separating critical systems prevents an attacker from moving freely and compromising the entire infrastructure.
• Perform backups: Carry out regular backups and store them in isolation, verifying that they can be restored correctly.
• Train the team: Human error remains one of the main entry points. Awareness is key.

“In a scenario where attacks are no longer massive but personalized, the question is no longer whether an organization can be targeted, but when. Understanding how groups like The Gentlemen operate is the first step to anticipating a threat that no longer gives warning,” concludes Lopez from ESET.

ESET invites you to learn more about cybersecurity by visiting: https://www.welivesecurity.com/es/.

For useful preventative information, visit https://www.eset.com/ve/ and follow them on social media @eset_ve, Instagram (@esetla), and Facebook (ESET.

Information and images provided by ESET and Comstat Rowland

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada New generation of ransomware targets Latin America with tailored attacks that cause severe damage apareció primero en Bitfinance.

Last November, the UK’s Security Service alerted members of Parliament about a foreign intelligence-gathering scheme: two LinkedIn profiles were contacting people working in British politics to request “insider information.” The MI5 revelations triggered a £170 million ($230 million) government initiative to address espionage threats against Parliament. While this is a high-profile case, ESET, a leading company in proactive threat detection, states that it is far from the first or only one. The site could also be a veritable treasure trove of corporate data that could be maliciously used to support fraud or threat campaigns.

Therefore, it is important to learn from this analysis and valuable professional opinion provided by ESET.

LinkedIn has amassed over one billion members worldwide since its founding in 2003. This represents a vast pool of potential targets for state-backed or financially motivated threat actors. Firstly, it is an extraordinary source of information where malicious actors can discover the roles and responsibilities of key individuals within a target company and reconstruct or reshape the relationships between individuals and projects they might be working on. Furthermore, it provides credibility and cover because, as a professional network, it is frequented by both high-level executives and lower-level employees, and it is a context in which a victim is more likely to open a direct message or InMail from someone on the platform than an unsolicited email.

On the other hand, it bypasses “traditional” security because there is no guarantee that phishing messages, malware, or spam won’t get through; and due to the site’s perceived credibility, target users may be more likely to click on malicious content. Finally, it’s easy to start operating; anyone can create a profile and begin lurking on the site to gather intelligence or send phishing messages and Business Enforcement (BEC) scams. Furthermore, attackers can hijack existing accounts or create fake identities before posing as candidates and recruiters for positions and jobs. The large number of compromised credentials circulating on cybercrime forums (due in part to infostealers) makes this relatively easy.

There are several ways threat actors can operationalize their malicious campaigns:

• Phishing and spearphishing: By using the information users share in their profiles, attackers can customize phishing campaigns (fake emails) to increase their success rate.
• Direct attacks: Contact can be made directly through malicious links designed to deploy malware, such as infostealers, or promote fake job offers intended to steal credentials.
• BEC: Similar to phishing, LinkedIn provides a wealth of intelligence that can be used to make Business Email Compromise attacks appear more convincing. It can help scammers identify who reports to whom, what projects they are working on, and the names of partners or suppliers.
• Deepfakes: LinkedIn can also host videos of targeted individuals, which can be used to create deepfakes and employ them in subsequent phishing, BEC, or social media scams.
• Account hijacking: Fake LinkedIn pages (phishing), infostealers, credential stuffing, and other techniques can help attackers take control of user accounts. These hijacked accounts can then be used in subsequent attacks targeting their contacts.
• Attacks on suppliers: LinkedIn can also be tracked for information about partners of a target company, who would also be targeted with phishing as part of a malicious “domino effect” strategy.

“The challenge posed by threats on LinkedIn is that IT departments find it difficult to obtain accurate information about the extent of the risk their employees face, and the tactics used to attack them. However, it makes sense to include LinkedIn threat scenarios like those described above in security awareness training courses. Employees should also be warned about the risk of oversharing information on the platform and given guidance on how to detect fake accounts and typical phishing lures,” says Mario Micucci, Cybersecurity Researcher at ESET Latin America.

ESET provides information on various threat groups that have used some of these tactics

• The Lazarus Group (North Korea) has posed as recruiters on LinkedIn to install malware on the computers of people working at an aerospace company, according to ESET Research. In fact, the research team also recently described the “Wagemole” campaigns, in which individuals aligned with North Korea attempt to obtain employment at foreign companies.
• ScatteredSpider contacted MGM’s help desk, impersonating an employee whose identity they obtained from LinkedIn, in order to gain access to the organization. The subsequent ransomware attack resulted in losses of $100 million.
• A spearphishing campaign called “Ducktail” targeted marketing and human resources professionals on LinkedIn, delivering malware and stealing information through links sent via direct message. The malware was hosted in the cloud.

Prevention

“To prevent account hijacking, a policy of regularly updating patches should be followed, security software should be installed on all devices (from a trusted vendor), and multifactor authentication should be enabled. Additionally, in corporate environments, it may be worthwhile to organize specific training sessions for executives, who are often the most frequent targets of attacks. Above all, ensure that the team is aware that, even on a network considered trustworthy like LinkedIn, not everyone acts in good faith or in their best interest,” recommends the ESET researcher.

ESET invites you to learn more about cybersecurity by visiting:  https://www.welivesecurity.com/es/.

For other useful preventative information, also available in Venezuela at: https://www.eset.com/ve/, and on their social media channels @eset_ve. Also on Instagram (@esetla)  and Facebook (ESET).

Information and image provided by ESET

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada Malicious actors hunt and manipulate on the important LinkedIn network; we must protect ourselves apareció primero en Bitfinance.

ESET Venezuela successfully held its 9th Technology Breakfast with media outlets and journalists specializing in cybersecurity, an essential meeting to analyze digital risks and redefine corporate protection in the era of Artificial Intelligence (AI).

The event focused on dismantling misconceptions, highlighting the need for a comprehensive protection strategy, and addressing social responsibility.

Demystifying digital defense

Michele Flammia, General Manager of ESET Venezuela, began the discussion by refuting common myths. He warned that the belief that only computers require protection, ignoring mobile phones, exposes users to serious risks, especially when downloading applications from unofficial sources or granting excessive permissions.

Flammia emphasized that cybersecurity is not the sole responsibility of the company’s IT (Information Technology) department, but rather a culture that must permeate the entire organization. He also dismissed the idea that users and SMEs “have nothing of value,” pointing out that intellectual property and personal information are prized assets for attackers.

Therefore, he recommended maintaining strong passwords and using multi-factor authentication as basic and mandatory measures.

The high cost of corporate vulnerability

Carlos López Rodríguez, Support and Training Manager at ESET Venezuela, presented compelling figures. The specialist revealed that the average global cost of a security breach is $4.44 million, a figure that increases to $4.9 million if the incident is caused by malicious insiders.

López emphasized the need to address reported vulnerabilities, citing cases where security flaws remained uncorrected for years, even in large corporations like Telefónica (affected by the WannaCry ransomware in 2017). He warned that one in six attacks is now powered by Artificial Intelligence, making prevention more critical than ever.

“If an organization has a vulnerability that was reported seven years ago and does nothing to fix it, something is happening at every level,” López stated, arguing that inaction is a global risk.

The expert highlighted that modern AI-based tools can save companies up to $1.9 million in costs after a breach, although only 49 % of organizations invest in security after being attacked.

The average recovery time from an attack, for those companies or institutions that manage to recover, is 276 days, a period of high operational vulnerability.

Sustainability and global responsibility

José Luis Rangel, marketing manager, who oversees sustainability matters in Venezuela, closed the day by speaking on “ESET’s Sustainable Management – ​​Experiences in Latin America.” Rangel highlighted that the company is one of the few in the sector that aligns its strategy with the UN Sustainable Development Goals (SDGs) and the Global Compact.

This management approach seeks a balance between environmental, social, and economic factors. It involves promoting gender equality, effective human talent management, and responsibility throughout the value chain, demonstrating that digital security is integrated with a global commitment to sustainability.

Rangel shared some of the sustainability initiatives they have implemented in Latin America and Venezuela in recent years, which are aligned with ESET’s four pillars of action in the region: environment, value chain, employees, and community.

For more information, visit the ESET website:  https://www.eset.com/ve/. You can also follow them on social media: Instagram (@esetla, @eset_ve) and Facebook (ESET).

Through on-site coverage by DOBLE LLAVE and El Sumario, as well as with information and main image provided by Comstat Rowland

Audiovisual production and general photography: Jesús Ramírez

Visit our news channel on Google News and follow us to get accurate, interesting information and stay up to date with everything. You can also see our daily content on X/Twitter and Instagram

La entrada ESET analyzes how cybersecurity is the new strategic pillar of business success apareció primero en Bitfinance.

The II Edition of the ‘Citizen Security Expo 2022’ was held between December 2 and 4 at the Simón Bolívar Park facilities, in La Carlota (Caracas), and MásQueSeguridad (MQS), a leading company in cybersecurity services —which not only had a stand through which it introduced attendees to the best of its portfolio of offers— but also with the presentation of its vice president William Ruiz, through his presentation “Trends and threats in Cybersecurity in 2023”.

And it is that the area of ​​expertise of MQS, which has been everything related to the digital world, was one of the several main axes of the event. Hence the importance of the presence of the company, and, above all, of its founder and director, the altruistic businessman and expert in computer security, Rafael Núñez Aponte.

Núñez and a team of professionals from the company shared with the public what MQS’s work is when it comes to providing information security advice and consultancy to all types of companies, while presenting what the Different solutions that they offer in this regard, such as: penetration tests, vulnerability analysis, digital forensics, courses and legal advice on computer security, among others.

For the protection of the citizen

During the ‘Citizen Security Expo 2022’, the different State security forces also presented to the population what are their latest technical and scientific advances, while they carried out different training talks.

The director of the Scientific, Criminal and Criminal Investigation Corps (CICPC), C/G Douglas Rico, was one of the most active officials and precisely touched on the issue of digital security and how computer crimes have grown in recent times, especially all after the pandemic, which made criminals mutate.

Rico spoke of the many modus operandi that some criminal groups use in this matter, emphasizing online scams, especially those seen on the Marketplace platform, which is used to make deceptive offers and steal from users. He also commented on telephone extortion, the theft of WhatsApps or emails, identity theft, among others.

Faced with these risks, many recommendations were offered at the ‘Citizen Security Expo 2022’, and almost all of them agreed on the use of common sense and prevention as the main weapon to protect oneself, which is one of the maxims that over the years have Both the group of experts who work at MásQueSeguridad and Rafael Núñez Aponte have been preaching.

With information from DobleLlave

Visit our news channel on Google News and follow us to get accurate, interesting information and stay up to date with everything. You can also see our daily content on Twitter and Instagram

La entrada MásQueSeguridad participated and reported from the ‘II Citizen Security Expo 2022’ apareció primero en Bitfinance.

The British Venezuelan Chamber of Commerce (BritCham), within the framework of the First Inter-Chamber Technology Meeting of Fedeuropa, held the ‘Technological Challenges 2023’ Discussion, an event staged in Caracas, which included the participation of a prominent group of cybersecurity experts.

Rafael Núñez Aponte, president of MásQueDigital and a specialist with many years of experience in information security in the Venezuelan business environment, referred in his presentation to the ‘Hacker Threats in 2023’, where he listed several of the main dangers, with particular emphasis on ransomware attacks, which are malicious codes through which criminals hijack data to later demand ransom, and which, in his opinion, are and will continue to be the main modus operandi.

Ransomware, the great enemy

During his presentation, Rafael Núñez explained that ransomware will continue to be the most widely used attack because it appeals to the vulnerability of both people and equipment and systems, and they have become more sophisticated and evolved, since it is very easy to slip through due to a lack of protection.

The president of MásQueDigital highlighted that Venezuela is a very vulnerable country in terms of cybersecurity because the potential targets of ransomware attacks are outdated, especially companies, banks and State institutions.

In this sense, Núñez assured that it is vital that every company or organization update and optimize their equipment, antivirus and systems, create backups, and, most importantly, give them the site that corresponds to the topic of cybersecurity, creating a dynamic and specific area of ​​information security.

He also spoke about social engineering, which are techniques that appeal to people’s cognitive deception, and how computer criminals sneak in to infiltrate institutions of all kinds through, for example, phishing, which consists of sending of an email or message from an attacker to a user pretending to be a legitimate entity with the aim of stealing data, contact lists, confidential information, money, and other things of both personal and organizational strategic value.

He also commented on other threats to take into account in 2023, such as cyber-attacks linked to third parties or ‘deepface’ (modification or substitution of a real face for another in an image or video), which can have really negative consequences for young people. when used, for example, to bully and blackmail.

Awareness, the best prevention

Rafael Núñez took advantage of the occasion to make a call to prioritize prevention in companies. In this sense, he advocated greater organizational resilience, the standardization of services at the cybersecurity level, the implementation of decentralized environments, as well as the creation of technological defense teams that are attentive to threats.

Finally, he recommended the activation and use of multifactor authentication and two-step verification on all computers and systems, since this simple action makes it very difficult for computer criminals to work and promotes information security, a term that the expert defines as a triangle composed of management, technology and awareness.

Resilience and digital transformation

In the BritCham ‘Technological Challenges 2023’ Conversation there were other interesting interventions by experts, such as Edwin Orrico (PwC), who presented the paper ‘Resilience and Cybersecurity’; Laszlo Beke (Beke Santos), who led the talk ‘Modern Work, a route to Digital Transformation’; and Carlos López Rodríguez (ESET Venezuela), who spoke about ‘Trust and the New Normality’.

Orrico explained the enormous importance of cybersecurity in the commercial environment in general, be it large or small, since the entire system works based on technology. By way of example, he mentioned that even kiosks depend on technology since their owners move contacts, customers and transactions via cell phone.

Thus, he explained that a technological environment forces cybersecurity measures to be taken and, therefore, to apply what he called ‘cyberresilience’, a subset of information security essential for businesses, since computer attacks continue to be a constant in the equation.

Beke, for his part, spoke about how society had to adapt to the new normality that emerged as a result of the pandemic, which brought with it the consolidation of a practically digitized and online workplace, and which, in his opinion, must be supported and promoted by the directives because that is where the future points.

In order to establish modern work, the expert commented that there must be a lot of change management focused on the human being, who must assume the new digital practices until they become habits and, eventually, a standard that is already known. it is much more productive and efficient.

All this happens because of the change in the profile of the professionals, who in turn must enter into a constant learning process to evolve along with what technology does.

Finally, López Rodríguez delved a little into this new normality that the world is currently experiencing after the health crisis, although emphasizing prevention and the fact that the more technological the context, the more vulnerable it is due to the threats mentioned by Núñez. in his speech.

This prevention, he explained, must occur on all fronts. Users, family, friends. Because it is not only organizations and companies that are threatened. In fact, the individual is a vector of the attack chain, since it is usual to aim at the small target to, through it, reach the larger ones.

He closed by saying that, due to the rise of remote work (and therefore the handling of sensitive information and data), the ideal would be to build a secure home infrastructure.

BitFinance.News /

Grupo de Comunicación Digital EL SUMARIO

With information from BritCham, direct coverage and specialized press

La entrada Rafael Núñez informed and invited to be preventive in cybersecurity apareció primero en Bitfinance.