Cybersecurity risks rise for SMEs and telecom sectors via phishing and Shadow AI

Digitalization and hybrid work models have elevated cybersecurity to a top priority for both large corporations and small to medium-sized enterprises (SMEs). In Italy, phishing-based cyber incidents increased by 66% over the last year. Data indicates that only 16% of Italian SMEs adopt a structured approach to cybersecurity, while many businesses with fewer than 50 employees spend less than 5,000 euros on security, often relying entirely on outsourcing without internal governance.

In the telecommunications sector, a new challenge known as ‘Shadow AI’ has emerged. While generative AI tools like ChatGPT can improve operational efficiency by an estimated 35%, their unauthorized use poses significant risks. Reports show that 66% of employees using AI on corporate devices do so via unmonitored personal accounts. This practice leads to the transfer of intellectual property and sensitive data, such as network configuration scripts and customer care transcripts, outside of secure corporate perimeters. Such incidents result in the compromise of personally identifiable information in 65% of cases.