In recent months, various Spanish companies have been the target of increasingly sophisticated cyber attacks, which has highlighted the vulnerability of multiple sectors to digital threats. These incidents have compromised sensitive data, interrupted critical operations and generated a significant economic impact.
And, despite the fact that 96% of IT leaders in Spain believe that the safety of their companies is solid, this recent increase in the number of cyber attacks to companies demonstrates that this confidence is not aligned to reality. This is highlighted by the latest Global Zscaler study, which highlights that 59% of Spanish companies expect to experience an important failure scenario in the next 12 months (60% globally), which reinforces the need for a more proactive approach in cybersecurity.
In this context, cyber resilience has become a key pillar for Spanish companies when ensuring business continuity and mitigating the impact of cyber threats, which constantly evolve and challenge the safety of companies in all sectors.
“It is not only about avoiding attacks, but also being able to detect them, respond effectively and recover quickly. Companies must transform their security approach and adopt solutions that allow them to anticipate threats and respond with agility. The ideal is to promote a cybercraft model that minimizes the attack surface, prevents the lateral movement of the attackers and protects business data at all times, ”says Pablo Vera, country manager of Spain and Portugal in Zscaler.
Wave of cyber attacks to companies in Spain: these are the main attack vectors
MAIN CIBERATES TO SPANISH COMPANIES
According to Zscaler, the three main attack vectors that have impacted Spanish organizations in recent months are:
- Exploitation of vulnerabilities in external suppliers: Many of the last cyber attacks in Spain have been through third -party security gaps with access to sensitive data, compromising personal and confidential information and highlighting the fragility of digital supply chains of organizations. These incidents underline the importance of evaluating and strengthening security measures to prevent attackers from taking advantage of this type of gaps.
- Ransomware attacks: This threat continues to increase, with cybercounts who use this type of malware to encrypt companies data and demand a ransom in exchange for recovering stolen information. In some cases, the attackers have demanded large sums of money, paralyzing essential operations and generating great economic losses.
- Phishing and Social Engineering: Cybercriminals have intensified their digital fraud campaigns, using emails and fraudulent messages to deceive employees and customers. These tactics seek to obtain access keys and sensitive information from the company in order to compromise systems and carry out financial fraud. Recently, several companies have been the objective of Phishing attacks, in which the attackers have used advanced artificial intelligence (AI) to generate highly personalized and convincing messages. These AI tools allow to analyze large volumes of data on the objectives, imitate specific writing styles and even respond dynamically in real time, significantly increasing the effectiveness of deceptions. When taking advantage of the human factor, cybercounts manage to obtain confidential access keys and financial data more easily, putting both employees and customers at risk.
