Cybersecurity Moves From Defense to Anticipation

Cybersecurity is moving from a defensive to a proactive strategy, as Kyndryl warns that anticipating risks is critical for safeguarding national stability amid rising AI-driven threats. Meanwhile, Mexico faces ransomware as a recurring “cost of doing business,” forcing companies to embed resilience into daily operations. Globally, high-profile breaches underscored systemic vulnerabilities: zero-click exploits targeted WhatsApp and Apple devices, TransUnion exposed the data of 4.4 million customers, and KnowBe4 flagged employee distraction as the new “zero-day.”

Ready? This is your Week in Cybersecurity!

Mexico

Ransomware Becomes Recurring Business Cost in Mexico: Akamai

Ransomware has evolved beyond an isolated cyberattack to become a predictable and recurring operating cost for companies in Mexico, reports Akamai Technologies. This form of digital extortion paralyzes operations, compromises data, and mimics the economic impact of physical extortion, forcing organizations to integrate cyber resilience as a continuous expense. 

Shifting From Cybersecurity Defense to Anticipation: Kyndryl

Cybersecurity can no longer be seen only as a technical issue, but as a strategic issue that defines the confidence and stability of the country, warns Carlos Marcel, CEO, Kyndryl Mexico. With the rapid adoption of AI, the sophistication of attacks and the dependence on critical infrastructure, Mexico faces the challenge of anticipating digital risks through a solid regulatory framework and the development of specialized talent, key elements to ensure a secure and inclusive digital future.

International

WhatsApp, Apple Targeted by Zero-Click Cyberattack

A “sophisticated cyberattack” campaign exploited two coordinated zero-day vulnerabilities, one in the WhatsApp messaging platform and another in Apple operating systems. This exploit chain enabled the installation of spyware on specific users’ devices, bypassing security defenses without requiring any victim interaction. Both Meta and Apple have since distributed security patches to mitigate the identified threats.

Human Distraction: The New “Zero-Day” in Cybersecurity

Employee distraction has become the primary cause of successful cyberattacks, surpassing a lack of training and the sophistication of threats as the main risk vector for modern organizations. According to the cybersecurity firm KnowBe4, 43% of professionals identify employee distraction as the key reason organizations fall victim to attacks, cementing it as the "new zero-day" vulnerability in the current threat landscape.

TransUnion Breach Exposes Data of 4.4 Million Customers

Credit reporting agency TransUnion reports a security breach that compromises the personal information of 4.4 million customers. The incident, which took place on July 28, originated from unauthorized access to a third-party vendor’s systems, highlighting the inherent risks in the corporate digital supply chain.