AI is optimizing and transforming cybercriminals’ tools, helping them craft more convincing lures, scale social engineering campaigns, and accelerate reconnaissance. Organizations are wise to pay attention to this trend, as existing security gaps are urgent proof of the need for cyber preparedness.

ESET, a leading company in proactive threat detection, asserts that the first points of failure remain familiar and typically involve: a phishing link clicked by an employee or a vulnerability that has not been patched in time. Unlike truly AI-driven malware (which remains rare), these threats continue to be among the most important for companies seeking to improve their preparedness.

“Fortunately, the threats that continue to cause the majority of incidents also have proven mitigation measures that can help keep your company secure,” says Mario Micucci, Cybersecurity Researcher at ESET Latin America.

According to the ESET SMB Cyber ​​Readiness Index 2026, “AI-driven malware” is identified as the top concern for SMEs globally for the coming year. In North America, the figure is even higher (33%). However, if this concept is understood as malware that uses AI in an automated, real-time manner, it is more of a topic for the research community than for cybersecurity professionals.

ESET discovered the first example of AI-written ransomware in 2025 and maintains that even in that case, it was likely a proof of concept (PoC). On the other hand, PromptSpy, discovered by ESET earlier this year, was the first known Android malware to use generative AI (GenAI) within its execution flow to achieve persistence.

“Threat researchers have made relatively few, if any, similar discoveries. Likewise, ESET’s MDR service has no evidence of incidents where generative AI played a significant role. Threat actors do benefit from AI support, but few are implementing this technology in real time for truly automated tasks,” the ESET researcher explains.

According to ESET, a more cost-effective approach for SMB leaders would be to pay closer attention to the root causes of incidents. In many SMEs, the first point of failure remains far more familiar: a phishing message that succeeds, an unpatched vulnerability, an alert that goes unnoticed, or a password that should never have been reused. These aren’t the most eye-catching cybersecurity risks, but they remain some of the most important for businesses looking to improve their preparedness and protection.

Top threats and risks for small businesses

• Phishing (26 %): ESET telemetry reveals that phishing was the most frequently detected threat during the second half of 2025 (30.8 %), and volumes continue to rise. Social engineering has always been a favorite tactic of threat actors, and both SMS phishing messages (smishing) and fraudulent phone calls (vishing) are gaining popularity. Technology can play a significant role in defense, but staff training and awareness are also critical and are often more difficult to implement correctly.
• Unpatched Security Vulnerabilities (23 %): Even the smallest organizations can operate a wide variety of software, and not everything can be kept up-to-date simply by turning on automatic updates. Understanding which systems are in operation and what critical data and assets might be exposed is the first challenge. The sheer volume and frequency with which new vulnerabilities are discovered today, coupled with the limited experience available to test and implement critical updates, can also represent significant obstacles.
• Lack of security oversight (22 %): You may have numerous security tools, but do you have a single, centralized place to collect, correlate, and highlight alerts? Effective monitoring is critical to accelerating threat detection and response. However, even companies that already have monitoring systems in place can be overwhelmed by the number of alerts, making it difficult to distinguish between false positives and real threats.
• Weak passwords (20 %): A security challenge as old as computing itself. Despite industry advancements toward phishing-resistant multi-factor authentication (MFA) and the use of passkeys, many organizations still rely on static passwords to protect their most important assets. Furthermore, employees often reuse them, increasing the risk of security breaches. Creating a strong password policy is the first step; enforcing it is the next.

Among the tried and tested solutions for common threats, ESET mentions that the key is recognizing that many of the aforementioned risks are exacerbated by AI, rather than this technology creating entirely new threats. For example, attackers are using AI to:

• Improve the quality of phishing messages (including the use of deepfakes) and scale and manage campaigns.
• Reduce the time needed to exploit vulnerabilities by quickly identifying and turning new flaws into attack tools.
• Analyze large volumes of data to identify frequently used passwords.
• Perform reconnaissance on targets to determine attack routes more quickly.

It can also reduce the time available for organizations to respond. If cybercriminals can identify vulnerable systems more quickly, develop exploit code more easily, or automate parts of their processes, the window between vulnerability disclosure, exploitation, and a successful attack could narrow even further. This is especially relevant for SMEs already struggling with asset inventory and patch prioritization. One of the key lessons is that neglecting the fundamentals increases the cost.

“The good news is that best practices remain effective for improving security posture. Vulnerability and patch management is a good starting point. Continuously scan operating systems and applications for known CVEs to identify exposures and then automatically deploy updates based on policies and risk level,” recommends Micucci.

Identity security is becoming increasingly critical. Password managers can generate and store strong, unique credentials for employees, but multi-factor authentication (MFA) is now an essential line of defense. Use privileged account management (PAM) tools to reduce the attack surface and protect high-risk accounts.

Address the shortage of specialized security personnel and improve monitoring by outsourcing detection and response to a trusted provider. Using a managed detection and response (MDR) service can also reduce the complexity and integration challenges that 21% of SMEs identify as their main barrier to improving their security posture.

“Ultimately, no organization is too small to become a target for an attack, so adopting a proactive approach to cybersecurity is essential. True cyber preparedness involves the ability to prevent, detect, and respond to threats — a fundamental milestone on the path to business resilience. And it can be achieved much faster by having a realistic view of the threats the organization faces. Not those that generate the most sensational headlines, but those that are causing real damage,” concludes Mario Micucci of ESET Latin America.

ESET invites you to learn more about cybersecurity by visiting:  https://www.welivesecurity.com/es/.

For other useful preventative information, also available in Venezuela at: https://www.eset.com/ve/, and on their social media channels @eset_ve. Also on Instagram  (@esetla) and Facebook (ESET).

Information and image provided by ESET and Comstat Rowland

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada SMEs must implement essentials to protect themselves from attacks and cyber threats apareció primero en Bitfinance.

Venezuelans attended Fitelven 2025 in person to learn about technological innovations in the broad field of telecommunications, cybersecurity, continuous training, and prevention, with presentations by, among other specialists and experts, Rafael Núñez Aponte, Director of Más Que Seguridad.

Núñez gave a masterclass on ransomware, emphasizing the importance of raising awareness and fostering a culture of security and protection. One of the topics that most captured the audience’s attention at this edition of the event was related to banking security and the protection of online transactions, with an emphasis on online users.

 

Ver esta publicación en Instagram

 

Una publicación compartida por Seguridad Informática (@masqueseguridad)

Más Que Seguridad (MQS) and Rafael Núñez participated in Fitelven 2025, interacted with the media and journalists, engaged with the public, congratulated the organizers, and commended the fair for its consolidation, as well as the various exhibitors for their positive growth.

 

Ver esta publicación en Instagram

 

Una publicación compartida por Seguridad Informática (@masqueseguridad)

Social media and contact: masqueseguridad

Coverage of Fitelven 2025 by EL SUMARIO media group

Video production: Jesús Ramírez / Ida Febres

Visit our news channel on Google News and follow us to get accurate, interesting information and stay up to date with everything. You can also see our daily content on X/Twitter and Instagram

La entrada Cybersecurity was a key focus at Fitelven 2025 with MQS and Rafael Núñez apareció primero en Bitfinance.

In the field of cybersecurity, threat actors have flourished amidst economic and geopolitical uncertainty, deploying cunning and tools to circumvent corporate defenses. According to Verizon’s Data Breach Investigations Report (DBIR), 83% of leaks are the work of external agents, while economic profit is responsible for 95%. ESET, a leader in proactive threat detection, details the top 10 incidents of 2023.

1. MOVEit: Zero-Day Vulnerability Exposes More than 2,600 Organizations

The modus operandi of this attack was to exploit a zero-day vulnerability in popular software, compromising data on more than 83 million people. The magnitude of the impact was compounded by affecting suppliers and service providers in the affected organizations.

2. UK Election Commission: Cybercriminals Expose Data on 40 Million Voters

In August, a complex cyberattack revealed the personal information of 40 million voters. The weak security of the Electoral Commission, coupled with the late notification to the public, raises questions about the effectiveness of its security measures.

3. Police Service of Northern Ireland: Sensitive Data Leak Raises Concern

The accidental posting of sensitive internal data on a public website exposed the information of 10,000 officers and civilian personnel. Although he was available for a short time, he caused concern and led to arrests for terrorist offences.

4. DarkBeam: Biggest Data Leak of the Year with 3.800 Million Records Exposes Vulnerabilities

The DarkBeam digital risk platform disfigured a data visualization interface, exposing 3.8 billion records. Although quickly corrected, uncertainty persists as to whether the data was accessed maliciously.

5. Indian Council for Medical Research (ICMR): Mega Breach Exposes Information of 815 Million Residents

Data extracted from the ICMR’s COVID test base, including crucial information such as names, addresses and Aadhaar numbers, were put up for sale. The seriousness of the incident opens the door to possible identity fraud attacks.

6. 23andMe: Threat Actor Steals Up to 20 Million Genetic Data

Using credential filling techniques, 23andMe user data, including genetic information and family data, was accessed. The incident highlights the importance of maintaining vigilance in the configuration of systems.

7. Rapid Recovery DDoS Attacks: Vulnerability in HTTP/2 Causes Mass Attacks

A zero-day vulnerability in the HTTP/2 protocol allowed unprecedented DDoS attacks, reaching 398 million requests per second. Although Internet giants have patched the bug, other companies are urged to follow suit.

8. T-Mobile: Security Breaches Impact 37 Million Customers

In January, T-Mobile suffered one of the biggest breaches, affecting 37 million customers with sensitive data theft. Despite subsequent action, the company revealed another breach in April, raising concerns about the security of its systems.

9. MGM International/Cesars: Ransomware Attacks Paralyze Operations in Las Vegas

Both Las Vegas giants were attacked with ransomware, causing significant disruptions and substantial economic costs. Infiltration methods, such as the use of LinkedIn, highlight the urgent need for more robust security measures.

10. Pentagon Leaks: Young National Guard Member Leaks Sensitive Military Documents

Young Jack Teixeira leaked sensitive military documents, providing military intelligence to Russia. This incident underscores the importance of safeguarding information in large organizations from malicious intruders.

K. Tovar

Source: Descifrado

(Reference image source: Unsplash+)

Visit our news channel on Google News and follow us to get accurate, interesting information and stay up to date with everything. You can also see our daily content on Twitter and Instagram

La entrada These were the most important threats of 2023 apareció primero en Bitfinance.

Whereas, organizations have expanded their digital connections exponentially in recent years, lengthening their digital frontier and becoming increasingly vulnerable to digital attacks; For the resilience of a company, it is essential to develop digital security policies and plans that are consistent with current and future conditions.

So every day, the role of the different CxOs in the digital security of organizations is more important, collaborating closely with the CISO.

These topics were expanded and deepened by two experts and invited speakers, Gustavo Quiñones, Support & CyberSOC Manager of ESET Latin America, and Rafael Núñez, digital security specialist, director of MásQueSeguridad and MásQueDigital, who, although they received applause, were interacting with other qualified specialists from the panel area and within the attendees, as they took the floor and further enriched the examination and debate.

The interesting conference-forum-discussion was held under the call of PwC, in the context of its program “Growing in the New Economy: technology for disruption, innovation and growth”, and took place in the auditorium of its headquarters building in Chuao, Caracas.

Rafael Núñez emphasized prevention, noting that cyberattackers that have become a “criminal industry” are making use of Artificial Intelligence for their purposes, which they alternate with Social Engineering tactics or techniques to deceive victims

Rafa Núñez captured the attention of the audience by explaining how the advances connected to and derived from Artificial Intelligence are being used for purposes of violating the laws, carrying out crimes and sophisticating deception, fraud and extortion procedures.

At another point in the event organized by PwC, Gustavo Quiñonez, manager of ESET, described different “Trojans”, some quite evolved, designed by criminals to specifically harm people and institutions in the banking system, for example.

There was also talk of the use of advanced technologies and almost unthinkable applications, deployed in the fields of espionage and the military industry.

Multiple and innumerable risks occur both in the organizational-corporate context and in the personal sphere, and in the future more attacks will be done via mobile devices than is done today. So we must review and update security in these times of Artificial Intelligence

Cybercrime has grown both in size and in the volume of money it captures or seizes, it currently has human resources and technology in the region, in the area, producing attacks from and to Latin America (Mexico, Brazil and Chile were mentioned). And this means losses for companies and also for individuals, cybercriminals are increasingly intensifying and diversifying their attacks.

Perhaps the most general and at the same time most accurate conclusion is that just as a new economy is lived, a new integral reality is also lived, accompanied by new risks, against which one must be cautious; we must take preventive measures, avoid as much as possible attacks and losses, act before they occur, and it is too late.

With information from Doble Llave and El Sumario

Visit our news channel on Google News and follow us to get accurate, interesting information and stay up to date with everything. You can also see our daily content on Twitter and Instagram

La entrada Cybersecurity in times of Artificial Intelligence apareció primero en Bitfinance.

The British Venezuelan Chamber of Commerce (BritCham), within the framework of the First Inter-Chamber Technology Meeting of Fedeuropa, held the ‘Technological Challenges 2023’ Discussion, an event staged in Caracas, which included the participation of a prominent group of cybersecurity experts.

Rafael Núñez Aponte, president of MásQueDigital and a specialist with many years of experience in information security in the Venezuelan business environment, referred in his presentation to the ‘Hacker Threats in 2023’, where he listed several of the main dangers, with particular emphasis on ransomware attacks, which are malicious codes through which criminals hijack data to later demand ransom, and which, in his opinion, are and will continue to be the main modus operandi.

Ransomware, the great enemy

During his presentation, Rafael Núñez explained that ransomware will continue to be the most widely used attack because it appeals to the vulnerability of both people and equipment and systems, and they have become more sophisticated and evolved, since it is very easy to slip through due to a lack of protection.

The president of MásQueDigital highlighted that Venezuela is a very vulnerable country in terms of cybersecurity because the potential targets of ransomware attacks are outdated, especially companies, banks and State institutions.

In this sense, Núñez assured that it is vital that every company or organization update and optimize their equipment, antivirus and systems, create backups, and, most importantly, give them the site that corresponds to the topic of cybersecurity, creating a dynamic and specific area of ​​information security.

He also spoke about social engineering, which are techniques that appeal to people’s cognitive deception, and how computer criminals sneak in to infiltrate institutions of all kinds through, for example, phishing, which consists of sending of an email or message from an attacker to a user pretending to be a legitimate entity with the aim of stealing data, contact lists, confidential information, money, and other things of both personal and organizational strategic value.

He also commented on other threats to take into account in 2023, such as cyber-attacks linked to third parties or ‘deepface’ (modification or substitution of a real face for another in an image or video), which can have really negative consequences for young people. when used, for example, to bully and blackmail.

Awareness, the best prevention

Rafael Núñez took advantage of the occasion to make a call to prioritize prevention in companies. In this sense, he advocated greater organizational resilience, the standardization of services at the cybersecurity level, the implementation of decentralized environments, as well as the creation of technological defense teams that are attentive to threats.

Finally, he recommended the activation and use of multifactor authentication and two-step verification on all computers and systems, since this simple action makes it very difficult for computer criminals to work and promotes information security, a term that the expert defines as a triangle composed of management, technology and awareness.

Resilience and digital transformation

In the BritCham ‘Technological Challenges 2023’ Conversation there were other interesting interventions by experts, such as Edwin Orrico (PwC), who presented the paper ‘Resilience and Cybersecurity’; Laszlo Beke (Beke Santos), who led the talk ‘Modern Work, a route to Digital Transformation’; and Carlos López Rodríguez (ESET Venezuela), who spoke about ‘Trust and the New Normality’.

Orrico explained the enormous importance of cybersecurity in the commercial environment in general, be it large or small, since the entire system works based on technology. By way of example, he mentioned that even kiosks depend on technology since their owners move contacts, customers and transactions via cell phone.

Thus, he explained that a technological environment forces cybersecurity measures to be taken and, therefore, to apply what he called ‘cyberresilience’, a subset of information security essential for businesses, since computer attacks continue to be a constant in the equation.

Beke, for his part, spoke about how society had to adapt to the new normality that emerged as a result of the pandemic, which brought with it the consolidation of a practically digitized and online workplace, and which, in his opinion, must be supported and promoted by the directives because that is where the future points.

In order to establish modern work, the expert commented that there must be a lot of change management focused on the human being, who must assume the new digital practices until they become habits and, eventually, a standard that is already known. it is much more productive and efficient.

All this happens because of the change in the profile of the professionals, who in turn must enter into a constant learning process to evolve along with what technology does.

Finally, López Rodríguez delved a little into this new normality that the world is currently experiencing after the health crisis, although emphasizing prevention and the fact that the more technological the context, the more vulnerable it is due to the threats mentioned by Núñez. in his speech.

This prevention, he explained, must occur on all fronts. Users, family, friends. Because it is not only organizations and companies that are threatened. In fact, the individual is a vector of the attack chain, since it is usual to aim at the small target to, through it, reach the larger ones.

He closed by saying that, due to the rise of remote work (and therefore the handling of sensitive information and data), the ideal would be to build a secure home infrastructure.

BitFinance.News /

Grupo de Comunicación Digital EL SUMARIO

With information from BritCham, direct coverage and specialized press

La entrada Rafael Núñez informed and invited to be preventive in cybersecurity apareció primero en Bitfinance.