Cybersecurity: A Priority Investment for Company Sustainability

International Computer Security Day is celebrated on Nov. 30, as a result of the world's first recorded case of network-spreading malware, known as the Morris Worm, an infection that was unleashed on a massive network in 1988. Although the initial intention was to measure the size of the network rather than damage files or systems, what was remarkable to the digital world was its ability to spread in a short time through the vulnerability of passwords and email programs.

From this case onward, every Nov. 30 serves as a reminder for companies and individuals to protect their data from any kind of malicious action in the digital environment. Taking this case as a starting point, we can observe that nowadays, the capabilities of technology and connectivity, now with the extra boost from artificial intelligence, are progressing to scales never seen before. However, as this happens, so do the challenges in the field of cybersecurity, where companies have the challenge and continuous work to offer comprehensive solutions that guarantee the digital integrity and data security of people.

Throughout this year, we have witnessed how artificial intelligence has functioned as a tool for both fields, both to carry out fraud and cybersecurity attacks for the theft of personal data on a massive scale, and to be harnessed in the design of solutions that are one step ahead of the most advanced digital threat mechanisms. 

We also see this same duality in application programming interfaces (APIs), which have become a fundamental part of continuously improving experiences and efficiency in the enterprise sector. Because APIs drive data that can expose vulnerable information to cyberattackers if they gain unauthorized access, ignoring care for their security can have consequences that would do terrible damage to a company’s reputation and trust. The crucial factor here is for companies and IT teams to look at the scale of attacks on applications and APIs, as the damage to a company's revenue and reputation, the latter of which is invaluable, is quite dangerous. 

In a report we published earlier this year, we noted that we had recorded a total of 26 billion attacks on web applications and APIs as of June alone. This trend in attacks leans heavily toward the technology sectors, e-commerce,  finance, such as online payment systems, and social networking, largely due to the financial and personal data they integrate.

This scenario highlights how online security is crucial in the face of actors looking for subtle and strategic ways to exploit vulnerabilities in systems and applications. It is urgent that companies consider cybersecurity best practices to prevent data breaches, because then we will understand these mechanisms and solutions as a fundamental part of investments, and as the pillar of a company's reputation and protection of the security and trust their customers place in them.

In the case of Mexico, research we conducted in the country showed that 78% of people believe that websites should better explain their security measures, reflecting a clear concern among Mexican users for transparency and clarity in the security measures on websites. For companies to comprehensively explain the security measures they take to protect their customers' personal data, it is vital to understand the areas of protection that are often less well protected, such as APIs. 

Users globally value digital security, and as risks increase, they need to feel more informed and protected when interacting with online platforms. Otherwise, companies could lose the trust of users, negatively affecting their reputation and, ultimately, their relationship with customers, and no company wants that. 

The great upside is that there are many mechanisms by which companies can protect themselves and safeguard their security and that of their customers. At Akamai, for example, we take a Zero Trust approach, which requires continuous verification of identity and authorization before allowing any access to digital assets, rather than allowing it indiscriminately. For instance, on the API protection front, we've just made available a new API protection connector, with agile, hands-off quick deployment and rapid response to attacks, with the ability to identify attacks dynamically.

Recommendations include, conducting security audits, regular penetration testing, investing in continuous cybersecurity training for staff and establishing an incident response action plan. While it is important for people to know what action to take, companies have a duty to not only address emerging challenges, but also to anticipate and innovate in an ever-changing digital landscape.

From the Morris Worm to the present day, we have witnessed digital threats evolve and spread at rapid speed, underscoring the critical importance of digital security to the future of business. The risks of not ensuring this security are invaluable, and at Akamai we emphasize that the effort, work, and growth that businesses and their employees put in every day must be safeguarded with the smartest and most effective cybersecurity strategies to ensure a robust defense against today's latent threats.