According to Kris Hagerman, CEO of Sophos, more and more sophisticated and advanced zero-day threats are appearing (zero-day attacks in technological language). A zero-day threat is a vulnerability that has been identified in a system and that no one else knows about, not even the developer of the system in question. Finding them is very complicated, it can take months or years to identify and develop them; In addition, an increasingly professional cyber-attack trading market is emerging.

So, for example, there’s something called initial access agents and they only do one thing: they find a way to break into a network and then they sell that information or enter the key.

Security within an organization has to do with three elements: people, processes, and technology, it is not enough to have good software, you also need employees to know how to use it and how to manage their lives online. It would be complex to try to put an end to cybercrime, but with a good organizational culture and data management it can become a manageable problem.

If a stranger asks for your credit card, you won’t give it to them, but on the Internet, if they ask you the right way, you will; we are more inexperienced in managing our online lives than our physical lives. Therefore, it is vital to train people in this field.