URL has been copied successfully!

Summer: Why cybersecurity must be strengthened as vacations abound

URL has been copied successfully!

Collecting Cyber-News from over 60 sources

Summer: Why cybersecurity must be strengthened as vacations abound

Aug 1, 2025 9:28 AM

Tags: access, ai, attack, authentication, automation, awareness, backup, control, corporate, credentials, cybersecurity, data, detection, email, encryption, exploit, infrastructure, malicious, mfa, monitoring, network, office, password, resilience, risk, theft, threat, tool, training, update, usa, vpn, wifi

Guillermo Fernandez, Sales Engineer for Southern Europe at WatchGuard Technologies.

WatchGuard Technologies.Another important point is that, during the summer, attackers know that many IT and cybersecurity teams are operating with more limited resources or with staff on vacation. “They take advantage of this to launch phishing campaigns and other targeted attacks, aware that attention and vigilance often decrease,” FernÃ¡ndez continues.Finally, we must not forget the physical risk, as the mobility of devices also increases the likelihood of theft or loss, with the consequent danger of sensitive information falling into the wrong hands.”Ultimately, summer isn’t just a time of rest; it’s also a time when companies must take extreme precautions and keep their cybersecurity policies active and adapted to the context,” he advises.

Increased cybersecurity risks: Cybersecurity risks tend to increase significantly in the summer, with attacks increasing by an average of 30% in the summer months of 2024 alone, notes BelÃ©n Ferreiro, cybersecurity account manager at Altia.”This is no coincidence,” she explains via email. “Many companies are operating with fewer staff; IT and security teams have fewer resources; and there’s a tendency to put off important tasks like updates, access checks, and backups until after work. All of this leaves doors open for attackers to exploit.”

b2b-contenthub.com/wp-content/uploads/2025/07/Belen-Arteiro.jpg?resize=300%2C188&quality=50&strip=all 300w, b2b-contenthub.com/wp-content/uploads/2025/07/Belen-Arteiro.jpg?resize=768%2C480&quality=50&strip=all 768w, b2b-contenthub.com/wp-content/uploads/2025/07/Belen-Arteiro.jpg?resize=1024%2C640&quality=50&strip=all 1024w, b2b-contenthub.com/wp-content/uploads/2025/07/Belen-Arteiro.jpg?resize=1536%2C960&quality=50&strip=all 1536w, b2b-contenthub.com/wp-content/uploads/2025/07/Belen-Arteiro.jpg?resize=1115%2C697&quality=50&strip=all 1115w, b2b-contenthub.com/wp-content/uploads/2025/07/Belen-Arteiro.jpg?resize=269%2C168&quality=50&strip=all 269w, b2b-contenthub.com/wp-content/uploads/2025/07/Belen-Arteiro.jpg?resize=134%2C84&quality=50&strip=all 134w, b2b-contenthub.com/wp-content/uploads/2025/07/Belen-Arteiro.jpg?resize=576%2C360&quality=50&strip=all 576w, b2b-contenthub.com/wp-content/uploads/2025/07/Belen-Arteiro.jpg?resize=400%2C250&quality=50&strip=all 400w” width=”1024″ height=”640″ sizes=”(max-width: 1024px) 100vw, 1024px” />
Not all threats rise in summer: According Josep Albors, director of research and awareness at ESET Spain, not every threat becomes more prominent at this time of year.”For example, if we review our telemetry data, we’ll see that detections of cyberthreats targeting the corporate sector decrease in the summer, which is normal due to less work activity during this period,” he says. “On the other hand, for some threats targeting individual users, we do see increases during the summer period, due to the increased use of devices for leisure purposes, which means that many users become careless and become an attractive target for cybercriminals.”

b2b-contenthub.com/wp-content/uploads/2025/07/Josep-Albors.jpg?resize=300%2C188&quality=50&strip=all 300w, b2b-contenthub.com/wp-content/uploads/2025/07/Josep-Albors.jpg?resize=768%2C480&quality=50&strip=all 768w, b2b-contenthub.com/wp-content/uploads/2025/07/Josep-Albors.jpg?resize=1024%2C640&quality=50&strip=all 1024w, b2b-contenthub.com/wp-content/uploads/2025/07/Josep-Albors.jpg?resize=1536%2C960&quality=50&strip=all 1536w, b2b-contenthub.com/wp-content/uploads/2025/07/Josep-Albors.jpg?resize=1115%2C697&quality=50&strip=all 1115w, b2b-contenthub.com/wp-content/uploads/2025/07/Josep-Albors.jpg?resize=269%2C168&quality=50&strip=all 269w, b2b-contenthub.com/wp-content/uploads/2025/07/Josep-Albors.jpg?resize=134%2C84&quality=50&strip=all 134w, b2b-contenthub.com/wp-content/uploads/2025/07/Josep-Albors.jpg?resize=576%2C360&quality=50&strip=all 576w, b2b-contenthub.com/wp-content/uploads/2025/07/Josep-Albors.jpg?resize=400%2C250&quality=50&strip=all 400w” width=”1024″ height=”640″ sizes=”(max-width: 1024px) 100vw, 1024px” />

b2b-contenthub.com/wp-content/uploads/2025/07/Jaime-Balana.jpg?resize=300%2C188&quality=50&strip=all 300w, b2b-contenthub.com/wp-content/uploads/2025/07/Jaime-Balana.jpg?resize=768%2C480&quality=50&strip=all 768w, b2b-contenthub.com/wp-content/uploads/2025/07/Jaime-Balana.jpg?resize=1024%2C640&quality=50&strip=all 1024w, b2b-contenthub.com/wp-content/uploads/2025/07/Jaime-Balana.jpg?resize=1536%2C960&quality=50&strip=all 1536w, b2b-contenthub.com/wp-content/uploads/2025/07/Jaime-Balana.jpg?resize=1115%2C697&quality=50&strip=all 1115w, b2b-contenthub.com/wp-content/uploads/2025/07/Jaime-Balana.jpg?resize=269%2C168&quality=50&strip=all 269w, b2b-contenthub.com/wp-content/uploads/2025/07/Jaime-Balana.jpg?resize=134%2C84&quality=50&strip=all 134w, b2b-contenthub.com/wp-content/uploads/2025/07/Jaime-Balana.jpg?resize=576%2C360&quality=50&strip=all 576w, b2b-contenthub.com/wp-content/uploads/2025/07/Jaime-Balana.jpg?resize=400%2C250&quality=50&strip=all 400w” width=”1024″ height=”640″ sizes=”(max-width: 1024px) 100vw, 1024px” />
.”

b2b-contenthub.com/wp-content/uploads/2025/07/Carlos-Rubio-1.jpg?resize=300%2C188&quality=50&strip=all 300w, b2b-contenthub.com/wp-content/uploads/2025/07/Carlos-Rubio-1.jpg?resize=768%2C480&quality=50&strip=all 768w, b2b-contenthub.com/wp-content/uploads/2025/07/Carlos-Rubio-1.jpg?resize=1024%2C640&quality=50&strip=all 1024w, b2b-contenthub.com/wp-content/uploads/2025/07/Carlos-Rubio-1.jpg?resize=1536%2C960&quality=50&strip=all 1536w, b2b-contenthub.com/wp-content/uploads/2025/07/Carlos-Rubio-1.jpg?resize=1115%2C697&quality=50&strip=all 1115w, b2b-contenthub.com/wp-content/uploads/2025/07/Carlos-Rubio-1.jpg?resize=269%2C168&quality=50&strip=all 269w, b2b-contenthub.com/wp-content/uploads/2025/07/Carlos-Rubio-1.jpg?resize=134%2C84&quality=50&strip=all 134w, b2b-contenthub.com/wp-content/uploads/2025/07/Carlos-Rubio-1.jpg?resize=576%2C360&quality=50&strip=all 576w, b2b-contenthub.com/wp-content/uploads/2025/07/Carlos-Rubio-1.jpg?resize=400%2C250&quality=50&strip=all 400w” width=”1024″ height=”640″ sizes=”(max-width: 1024px) 100vw, 1024px” />
Never let your guard down: “There’s a false sense of pause in the summer, when in reality systems continue to operate, threats persist, and attackers are active. Many companies lower their level of surveillance just when they should be reinforcing it,” Rubio says, adding that the confidence effect of leaving operations on autopilot for a few weeks creates a window of opportunity that attackers are aware of and exploit. “You have to be aware of this to mitigate it.””The key is anticipation and preparation,” says Juan Francisco Cornago, director of cybersecurity at Babel, via email. He recommends “reviewing continuity plans, reinforcing monitoring with automated tools, protecting remote access with strong authentication, enforcing password changes, keeping response teams operational, and, above all, raising internal awareness of risks inherent to the summer period.”And in his opinion, “a well-designed awareness campaign before the holidays can make a real difference.”Ãngel Serrano, solutions consulting manager at Palo Alto Networks, agrees with the advice to emphasize reviews at this time.”First of all, it’s a good idea to review how, from where, and with what protection employees connect during the summer. Working from open Wi-Fi networks without a corporate VPN is a serious mistake, not always due to ignorance, but rather convenience,” he says. “Securing traffic, verifying the device, applying multi-factor authentication, and limiting access privileges are basic measures, but they’re often not applied with the same rigor outside the office. And when the perimeter disappears, the zero trust model becomes more important than ever.”He adds: “To this we must add the physical protection of devices. Encryption by default, remote management, automatic locking, and clear policies regarding data use and storage outside the office are critical measures.”

b2b-contenthub.com/wp-content/uploads/2025/07/Angel-Serrano.jpg?resize=300%2C188&quality=50&strip=all 300w, b2b-contenthub.com/wp-content/uploads/2025/07/Angel-Serrano.jpg?resize=768%2C480&quality=50&strip=all 768w, b2b-contenthub.com/wp-content/uploads/2025/07/Angel-Serrano.jpg?resize=1024%2C640&quality=50&strip=all 1024w, b2b-contenthub.com/wp-content/uploads/2025/07/Angel-Serrano.jpg?resize=1536%2C960&quality=50&strip=all 1536w, b2b-contenthub.com/wp-content/uploads/2025/07/Angel-Serrano.jpg?resize=1115%2C697&quality=50&strip=all 1115w, b2b-contenthub.com/wp-content/uploads/2025/07/Angel-Serrano.jpg?resize=269%2C168&quality=50&strip=all 269w, b2b-contenthub.com/wp-content/uploads/2025/07/Angel-Serrano.jpg?resize=134%2C84&quality=50&strip=all 134w, b2b-contenthub.com/wp-content/uploads/2025/07/Angel-Serrano.jpg?resize=576%2C360&quality=50&strip=all 576w, b2b-contenthub.com/wp-content/uploads/2025/07/Angel-Serrano.jpg?resize=400%2C250&quality=50&strip=all 400w” width=”1024″ height=”640″ sizes=”(max-width: 1024px) 100vw, 1024px” />
More training neccessary: Babel’s Cornago believes that cybersecurity training remains one of the most exploited weaknesses by attackers. “Technology alone cannot prevent incidents if the human factor fails,” he emphasizes. “That’s why it’s so important to implement a cross-functional cybersecurity culture, where all employees, not just technicians, know how to act, what signs to look for, and what they shouldn’t do.”Unfortunately, he adds, “we already know all this, and we keep failing.””The problem isn’t just knowledge, but our cognitive resilience, and that’s precisely where companies should focus their efforts. Let’s not keep making the same mistakes over and over again,” he says.One mistake Cornago sees is a tendency in summer to let one’s guard down. “Paradoxically, just when we should be most protected, many organizations reduce their monitoring and response capabilities,” he says.”Strengthening monitoring, maintaining prepared on-call shifts, and training employees in good digital practices are essential measures,” he says. “Cybersecurity isn’t seasonal or exclusive to the technical department: It’s a shared responsibility that must be maintained 365 days a year by 100% of the workforce and its supply chain.”NetApp’s BalaÃ±Ã¡ also advocates for improved training regimens. “Continuous programs are needed, tailored to the different profiles of the organization, that explain not only what to do, but also why and what happens if we don’t do it right,” he says.GFT’s Rubio agrees.”Summer, due to its unique nature, is an ideal time to reinforce this learning, as changes in routine and less supervision can test acquired security habits,” he says. “Engaging in practical, contextualized, and regular training can make a difference and significantly strengthen the organization’s cybersecurity culture.”

First seen on csoonline.com

Jump to article: www.csoonline.com/article/4030931/summer-why-cybersecurity-needs-to-be-further-strengthened.html

also interesting:

9 VPN alternatives for securing remote network access

The 2024 cyberwar playbook: Tricks used by nation-state actors

Cybersecurity Snapshot: AI Data Security Best Practices Released, While New Framework Seeks To Help IT Pros Gain Cyber Skills

Cybersecurity Snapshot: Study Raises Open Source Security Red Flags, as Cyber Agencies Offer Prevention Tips Against Telecom Spying Attacks