EUR
en
- es
- pt
- fr
- de
- it
Published on 2025-03-11
Connecting to free WiFi networks, granting excessive permissions to apps, or using weak passwords and reusing them across different platforms are some of the daily online mistakes that allow cybercriminals to access personal information.
Mobile phones and computers have become essential electronic devices in people’s daily lives, used primarily for searching information, accessing social media, carrying out financial activities, and communicating with friends and family, according to the Digital Society 2024 report by the National Observatory of Technology and Society (ONTSI).
This widespread use of electronic devices for internet access and the proliferation of digital services and platforms also means that users manage a vast amount of personal data, which can be exposed in cyberattacks or due to poor security practices.
For instance, connecting to WiFi networks in cafés, airports, or shopping centers helps save mobile data, especially for those without unlimited plans or when abroad. However, this action poses "a major risk," warn researchers at Check Point Software.
"When connecting to a public WiFi network, cybercriminals can intercept the connection and access personal data without the user noticing," they explain. To mitigate this, they recommend using a Virtual Private Network (VPN) to encrypt the connection and disabling automatic WiFi connections. Additionally, they advise using mobile data when handling sensitive information.
Apps often request access to sensitive elements of smartphones, such as the camera, microphone, or contact list, to enable basic functions. However, some apps request unnecessary permissions that are not essential for their operation.
Security experts warn that "this can lead to the misuse of personal data or its sale to third parties without users’ knowledge." They advise reviewing app permissions before installation and disabling any that are not essential.
Another common mistake involves passwords. Using a simple password or reusing the same one across multiple digital services "remains a common practice," say experts, who highlight the risks in case of a data breach.
"To stay secure, multiple measures must be taken: create unique passwords for each service, use a password manager, and enable two-factor authentication (2FA)," they recommend.
They also stress the need for security measures on electronic devices, such as a PIN, a pattern lock, or biometric recognition (fingerprint or facial recognition). "Without adequate security, anyone could access emails, social media, banking data, and personal documents," they warn.
Check Point researchers also highlight the risks of artificial intelligence (AI). Although chatbots like Gemini or ChatGPT boost productivity, improper use can compromise sensitive data.
"Some people input sensitive data without considering the consequences," they explain. This data could be stored within the chatbot or used to train AI models, potentially resurfacing later in responses.
"To use AI tools safely, users should avoid sharing confidential information, review privacy policies, and, in corporate settings, use versions with enhanced security guarantees," they suggest.
Cybercriminals also leverage AI for sophisticated attacks, such as personalized phishing emails or deepfakes.
"Online safety tips may seem basic and repetitive, but many users still make these mistakes every day without realizing the risks," states Eusebio Nieva, technical director at Check Point Software for Spain and Portugal, in recognition of Safer Internet Day.
COMMENTS
No customer comments for the moment.