73% of cyber attacks in Spain have as a starting point technological assets that companies themselves do not manage or do not manage properly. This is indicated by a new study by Trend Micro, where it is analyzed how the rapid adoption of technologies such as the generative AI and the proliferation of connected devices has expanded the so -called “attack surface” of organizations.
In this new digital scenario, many IT departments are losing visibility on a significant part of their assets, thus exposing companies to increasingly complex threats.
“Managing Cybersian exposure should be an absolute priority for all companies. Although most understand the impact it is causing at the business level, proactive security measures are not being taken to mitigate that risk continuously,” said Kevin Simzer, director of Operations of Trend Micro.
Cyber attacks in Spain
The report shows that 89% of organizations consider that the management of their attack surface is directly or partially linked to general business risk. And although direct threats such as ransomware or data leaks remain priority, collateral effects are increasingly relevant: half of the companies surveyed recognize negative impacts on their relationships with suppliers (54%), customer confidence and reputation (48%), operational continuity (39%) and financial results (37%).
The boom of generative AI and IoT devices overflows the control capacity of organizations on their digital infrastructure
Lack of specific tools and resources
Despite the high level of awareness, only 46% of global organizations claim to use specialized tools to control the risk derived from their digital exposure. At the same time, 77% have already begun to integrate solutions based on artificial intelligence as part of their cybersecurity strategy, although unequally.
In budgetary terms, just a quarter of the resources are currently destined to manage the risk associated with the attack surface, and 69% of companies consider that they have adequate means to face it. However, Trend Micro’s report suggests that this perception can be misleading, since many threats continue to go unnoticed in hidden or evil assets.
“Already in 2022, organizations were worried because their cyberbrain surface was not controlled. But the challenge is more serious today,” Simzer recalled. With the digital ecosystem evolving at a dizzying pace, experts insist that cybersecurity should be transformed from a reactive approach to a strategic one, which integrally contemplates all the elements that are part of the digital infrastructure, including the most invisible.
