Cyberattacks are becoming increasingly sophisticated and effective. With the use of artificial intelligence, hackers are able to target a larger number of victims and achieve better results. This information comes from the annual report ‘The Global Cybersecurity Outlook 2025’ by the World Economic Forum, one of the most important in the sector, which also highlights the increase in attacks using artificial intelligence for mass email campaigns with links leading to data theft.
Additionally, data from the Federation of Industries of the State of São Paulo (Fiesp) reveals that three out of ten industries have already suffered some type of cyberattack. According to Fiesp’s research, in Brazil, 52.4% of manufacturing companies do not treat cybersecurity as a priority, 44.2% have a dedicated security structure, and 64% invest only 1% of their revenue in this area.
According to computer scientist Michele Nogueira, PhD in Computer Science from Sorbonne University and professor at UFMG, who researches the use of Artificial Intelligence in Cybersecurity, the low investment by companies in data security often stems from a lack of knowledge about the field. Many business owners believe that installing simple antivirus software is enough to protect against hacker attacks. ‘Using antivirus is a basic recommendation for any company, as is having a firewall, performing backups, and having a security policy. Small businesses can also develop a security strategy, but each case is unique. It’s necessary to understand the company’s characteristics, assets, and digital infrastructure through an initial inventory to create an appropriate strategy with the help of a security professional. Even with limited resources, it’s possible to implement effective defenses and minimize risks associated with these threats,’ she explains.
Others avoid implementing data security projects because they believe the investment is too costly. Michele Nogueira explains that services can start with basic measures and evolve with the implementation and installation of cybersecurity infrastructure. ‘There’s also the option of outsourcing security services. Small businesses can benefit from security solutions provided as a service, offering tools and support at an affordable cost without the need for large initial investments. In addition tochiring specialized consultancies to conduct security assessments, identify vulnerabilities, and suggest improvements,’ illustrates the computer scientist.
Automated companies must increase their precautions
The ‘OTRS Spotlight: IT Service Management 2023’ survey showed that 78% of Brazilian companies have already invested in automation, with 52% having acquired tools and experience in using them, and another 26% having invested in systems but lacking the necessary knowledge to implement them. Companies with automated services are more susceptible to cyberattacks in their production systems. ‘This is one of the major concerns, especially considering critical systems—those supporting essential services for society such as energy, healthcare, transportation, and water supply. Many companies providing such services are increasingly digitalizing their infrastructure for automation, but this expands the attack surface and risks,’ warns Michele Nogueira.
To prevent attacks, in addition to adopting cybersecurity measures by companies, constant updates are crucial, as the use of artificial intelligence by hackers leads to the continuous creation of new threats. ‘It’s useful to conduct periodic consultations or assessments of your digital infrastructure concerning cybersecurity. I compare it to regular medical check-ups people undergo to ensure everything is in order. The idea is similar, and there are tests that can be performed periodically and proactively to help diagnose and address risk points, reducing the possibility of attacks,’ concludes the computer scientist.
