AI is optimizing and transforming cybercriminals’ tools, helping them craft more convincing lures, scale social engineering campaigns, and accelerate reconnaissance. Organizations are wise to pay attention to this trend, as existing security gaps are urgent proof of the need for cyber preparedness.

ESET, a leading company in proactive threat detection, asserts that the first points of failure remain familiar and typically involve: a phishing link clicked by an employee or a vulnerability that has not been patched in time. Unlike truly AI-driven malware (which remains rare), these threats continue to be among the most important for companies seeking to improve their preparedness.

“Fortunately, the threats that continue to cause the majority of incidents also have proven mitigation measures that can help keep your company secure,” says Mario Micucci, Cybersecurity Researcher at ESET Latin America.

According to the ESET SMB Cyber ​​Readiness Index 2026, “AI-driven malware” is identified as the top concern for SMEs globally for the coming year. In North America, the figure is even higher (33%). However, if this concept is understood as malware that uses AI in an automated, real-time manner, it is more of a topic for the research community than for cybersecurity professionals.

ESET discovered the first example of AI-written ransomware in 2025 and maintains that even in that case, it was likely a proof of concept (PoC). On the other hand, PromptSpy, discovered by ESET earlier this year, was the first known Android malware to use generative AI (GenAI) within its execution flow to achieve persistence.

“Threat researchers have made relatively few, if any, similar discoveries. Likewise, ESET’s MDR service has no evidence of incidents where generative AI played a significant role. Threat actors do benefit from AI support, but few are implementing this technology in real time for truly automated tasks,” the ESET researcher explains.

According to ESET, a more cost-effective approach for SMB leaders would be to pay closer attention to the root causes of incidents. In many SMEs, the first point of failure remains far more familiar: a phishing message that succeeds, an unpatched vulnerability, an alert that goes unnoticed, or a password that should never have been reused. These aren’t the most eye-catching cybersecurity risks, but they remain some of the most important for businesses looking to improve their preparedness and protection.

Top threats and risks for small businesses

• Phishing (26 %): ESET telemetry reveals that phishing was the most frequently detected threat during the second half of 2025 (30.8 %), and volumes continue to rise. Social engineering has always been a favorite tactic of threat actors, and both SMS phishing messages (smishing) and fraudulent phone calls (vishing) are gaining popularity. Technology can play a significant role in defense, but staff training and awareness are also critical and are often more difficult to implement correctly.
• Unpatched Security Vulnerabilities (23 %): Even the smallest organizations can operate a wide variety of software, and not everything can be kept up-to-date simply by turning on automatic updates. Understanding which systems are in operation and what critical data and assets might be exposed is the first challenge. The sheer volume and frequency with which new vulnerabilities are discovered today, coupled with the limited experience available to test and implement critical updates, can also represent significant obstacles.
• Lack of security oversight (22 %): You may have numerous security tools, but do you have a single, centralized place to collect, correlate, and highlight alerts? Effective monitoring is critical to accelerating threat detection and response. However, even companies that already have monitoring systems in place can be overwhelmed by the number of alerts, making it difficult to distinguish between false positives and real threats.
• Weak passwords (20 %): A security challenge as old as computing itself. Despite industry advancements toward phishing-resistant multi-factor authentication (MFA) and the use of passkeys, many organizations still rely on static passwords to protect their most important assets. Furthermore, employees often reuse them, increasing the risk of security breaches. Creating a strong password policy is the first step; enforcing it is the next.

Among the tried and tested solutions for common threats, ESET mentions that the key is recognizing that many of the aforementioned risks are exacerbated by AI, rather than this technology creating entirely new threats. For example, attackers are using AI to:

• Improve the quality of phishing messages (including the use of deepfakes) and scale and manage campaigns.
• Reduce the time needed to exploit vulnerabilities by quickly identifying and turning new flaws into attack tools.
• Analyze large volumes of data to identify frequently used passwords.
• Perform reconnaissance on targets to determine attack routes more quickly.

It can also reduce the time available for organizations to respond. If cybercriminals can identify vulnerable systems more quickly, develop exploit code more easily, or automate parts of their processes, the window between vulnerability disclosure, exploitation, and a successful attack could narrow even further. This is especially relevant for SMEs already struggling with asset inventory and patch prioritization. One of the key lessons is that neglecting the fundamentals increases the cost.

“The good news is that best practices remain effective for improving security posture. Vulnerability and patch management is a good starting point. Continuously scan operating systems and applications for known CVEs to identify exposures and then automatically deploy updates based on policies and risk level,” recommends Micucci.

Identity security is becoming increasingly critical. Password managers can generate and store strong, unique credentials for employees, but multi-factor authentication (MFA) is now an essential line of defense. Use privileged account management (PAM) tools to reduce the attack surface and protect high-risk accounts.

Address the shortage of specialized security personnel and improve monitoring by outsourcing detection and response to a trusted provider. Using a managed detection and response (MDR) service can also reduce the complexity and integration challenges that 21% of SMEs identify as their main barrier to improving their security posture.

“Ultimately, no organization is too small to become a target for an attack, so adopting a proactive approach to cybersecurity is essential. True cyber preparedness involves the ability to prevent, detect, and respond to threats — a fundamental milestone on the path to business resilience. And it can be achieved much faster by having a realistic view of the threats the organization faces. Not those that generate the most sensational headlines, but those that are causing real damage,” concludes Mario Micucci of ESET Latin America.

ESET invites you to learn more about cybersecurity by visiting:  https://www.welivesecurity.com/es/.

For other useful preventative information, also available in Venezuela at: https://www.eset.com/ve/, and on their social media channels @eset_ve. Also on Instagram  (@esetla) and Facebook (ESET).

Information and image provided by ESET and Comstat Rowland

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada SMEs must implement essentials to protect themselves from attacks and cyber threats apareció primero en Bitfinance.

When an earthquake strikes, the damage doesn’t end with the tremor. It comes afterward: the business that can’t open, the family that doesn’t know how to start over, the wall that couldn’t withstand the impact. Bancamiga Banco Universal understood this from the outset and acted accordingly: it allocated a $5 million fund, available now, to support the recovery of affected individuals and communities.

“Our priority is that no affected family or business feels alone in this. We are here to help you get back on your feet,” stated José Simón Elarba, Chairman of the Board of Directors of Bancamiga.

The fund is designed to be truly helpful, not to add to the bureaucracy at the worst possible time. Applications are already being received through business executives. The process is streamlined, the decision-making process is humane, and the response is immediate for the most urgent cases.

Who is it for?

The fund serves individuals, businesses, small and medium-sized enterprises in the affected areas. Resource allocation takes into account the specific circumstances of each case: the physical damage sustained, the loss of income, the business interruption, the impact on jobs, and the damage to the primary residence. Those who need it most, first.

What does the fund include?

The terms, depending on the case, were designed so that the loan is a recovery tool, not an additional burden:

1. Special interest rates—below standard market rates.
2. Grace period for principal repayment — time to breathe before starting payments.
3. Flexible repayment terms — adjusted to the actual recovery rate of each case.
4. Fee waivers or reductions — lower costs when it matters most.
5. No prepayment penalty — complete flexibility if recovery is faster.
6. Flexible collateral options — tailored to the applicant’s current situation.

How to apply?

Applications are received through Bancamiga business executives. More complex or critically impacted cases are handled directly by the Natural Disaster Contingency Fund, guaranteeing priority attention and a fair distribution of resources across all affected areas and sectors.

“This fund is a swift and humane response, but also a responsible and sustainable one. The goal is not only to provide loans: it is to support individuals and businesses so they can recover, resume their operations, and rebuild what they lost. Venezuela needs us to be present, and Bancamiga is there,” stated José Simón Elarba, Chairman of the Board of Directors of Bancamiga.

About Bancamiga Banco Universal

Bancamiga Banco Universal, C.A. is a Venezuelan financial institution with 19 years of continuous operation, more than 1,221,000 active clients, and a projected transaction volume of US$26.963 billion in 2025. It operates under the supervision of SUDEBAN and complies with Mastercard’s international compliance standards as the principal licensee in Venezuela.

Information and image courtesy of Bancamiga

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada Bancamiga shows solidarity with the country by activating a $5 million fund apareció primero en Bitfinance.