Cyberattacks are becoming increasingly sophisticated and effective. With the use of artificial intelligence, hackers are able to target a larger number of victims and achieve better results. The information is from the annual report The Global Cybersecurity Outlook 2025, from the World Economic Forum, one of the most important in the sector, which also highlights the increase in attacks using artificial intelligence for mass email blasts with links that lead to data theft.
Furthermore, data from the Federation of Industries of the State of São Paulo (Fiesp) reveal that three out of ten industries have already experienced some type of cyber attack. According to Fiesp's research, in Brazil, 52.4% of manufacturing companies do not treat cybersecurity as a priority, 44.2% have a dedicated security structure, and 64% invest only 1% of their revenue in the area.
For computer scientist Michele Nogueira, Ph.D. in Computer Science from the University of Sorbonne, a professor at UFMG who conducts research on the use of Artificial Intelligence in Cybersecurity, the low investment by companies in data security is often due to a lack of knowledge about the field. Many entrepreneurs believe that installing a simple antivirus is sufficient to protect against hacker attacks. "Using antivirus software is a basic recommendation for any company. Just like having a firewall, making backups, and having a security policy. It is also possible for small businesses to have a security strategy. But each case is unique. It is necessary to understand the company's characteristics, its assets, its digital infrastructure through an initial inventory, so that an appropriate strategy can be created by a security professional. Even with limited resources, it is possible to implement an effective defense and minimize the risks associated with these threats," she analyzes.
Others stop implementing data security projects because they believe the investment is costly. Michele Nogueira explains that the service can start with the basics and evolve with the implementation and installation of cybersecurity infrastructure. There is also the possibility of hiring outsourced security services. Small businesses can benefit from security solutions provided as a service, offering tools and support at an affordable cost without the need for large initial investments. Besideschire specialized consultants to carry out security assessments, identify vulnerabilities and suggest improvements”, explains the computer scientist.
Automated companies must take extra care
The survey "OTRS Spotlight: IT Service Management 2023" showed that 78% of Brazilian companies have already invested in automation, with 52% of them having acquired tools and experience in using them, and another 26% investing in systems but still lacking the necessary knowledge to carry out the procedures. Companies with automated services are more susceptible to cyberattacks on their production systems. "This is one of the major concerns, especially considering critical systems, that is, systems that support essential services for society such as energy, health, transportation, and water supply. Many companies providing such services are increasingly digitizing their infrastructure for automation, but this leads to a larger attack surface and risk," warns Michele Nogueira.
To prevent attacks, in addition to adopting cybersecurity actions and measures by companies, constant updating is essential, as with the use of Artificial Intelligence by hackers, new types of threats are constantly being created. It is interesting to conduct consultations or regular examinations of your digital infrastructure regarding cybersecurity. I compare it to regular medical check-ups that people do to verify if everything is in order. The idea is similar, and there are tests that can be performed periodically and proactively that, based on the diagnosis, help the company address risk points and reduce the possibility of attacks, concludes the computer scientist.
