For Individuals: vigilance and digital hygiene

• Two-Factor Verification: If you receive an unusual request (urgent transfer, login code, etc.) via email, message, or even video call, take the time to verify through another channel. A direct phone call to the person concerned often helps clear up doubts. In 2025, hearing a familiar voice is no longer enough to guarantee that it’s the right person – voice deepfakes can imitate tone and intonation. Adopt the “four eyes” reflex: always confirm a sensitive request with a second reliable contact method.

• Account Protection: Use strong and unique passwords (a password manager can help you with this) and enable two-factor authentication wherever possible. These basic measures remain devilishly effective, even against sophisticated attacks. A hacker who has stolen your password through phishing will be stopped cold if an SMS code or a fingerprint is also required.

• Updates and Antivirus: Continue to diligently apply updates for your devices and applications. Many automated attacks exploit known vulnerabilities – which patches specifically address. A good up-to-date antivirus/anti-malware adds an extra layer of security, particularly against common malware. Admittedly, it won’t detect all “smart” malware, but it will already stop classic threats that remain plentiful.

• Caution on the Web: Be extra careful before clicking on a link or downloading an attachment, even if the message seems authentic. If in doubt, do not click. Similarly, be wary of overly enticing or alarming content on social media – AI makes it easier to create fake viral content. Lastly, avoid overexposing your personal data online (date of birth, names of children, etc.): this information is a goldmine for fueling targeted scams.

• Regular Backups: This advice has always been valid, but it makes all the more sense with the threat of ransomware (these programs that encrypt your files and then demand a ransom). Make frequent backups of your important data, ideally on an offline medium. In case of an attack, you won’t be held hostage to your files.

For Businesses: anticipating and training is the key to success

• Employee Awareness: Humans remain the hackers' preferred weak link – but also your best asset if you turn them into a strong link. Regularly train your teams on cyber risks, especially the new scams related to AI. Simulate internal phishing, organize workshops on deepfakes, and share examples of scams that make the headlines. A well-trained employee is a company 60% less exposed to cyberattacks according to a Ponemon study. By combining technology and education, one can create a true human shield against threats, with each employee becoming an actor in security.

• Immersive Training: There are now innovative solutions to train your troops in almost real conditions. For example, Riven has developed for IMD (in Lausanne) a cyberattack simulation in the form of a real-time multiplayer game, incorporating adaptive features and customizable scenarios. This type of “serious game” puts participants in the shoes of either attackers or defenders, raising their awareness of attacks (here, a ransomware) in a playful way. The goal? For everyone to acquire the right reflexes in a crisis situation, so as not to be caught off guard on D-day.

• Advanced Monitoring and Detection: Equipped with appropriate tools, your information system can also keep watch 24/7. Consider deploying security solutions enhanced by AI (detection of abnormal behavior, real-time log analysis, etc.). These intelligent systems can detect subtle signals that a human would miss and can stop an emerging attack. They excel, for example, at identifying a spike in suspicious network traffic or an unusual login in the middle of the night. Of course, nothing replaces a human analyst for the final decision, but AI can significantly speed up your teams’ responsiveness.

• Systematic Verification Policies: Implement strict control procedures, especially for sensitive operations. For instance, to avoid “fake president” fraud (in whatever high-tech form), require confirmation by phone from a second responsible party before any significant transfer. Similarly, be wary of urgent requests that deviate from the norm, even if they seem to come from a known senior executive – hierarchy should not prevent vigilance. It’s better to slightly offend a legitimate director through excessive caution than to lose millions due to a digital impersonator!

• Access and Data Management: Adopt the principle of least privilege: each user or application should only access the data and systems necessary for their task. By limiting rights, the impact an intruder (human or AI) can have is reduced. Segment the network, encrypt sensitive data, and closely monitor administrator access. And of course, back up your critical data offline and test your disaster recovery plans – it cannot be emphasized enough.

Conclusion: AI, threat or shield?

If AI causes cold sweats by boosting attacks, it also brings great solutions to counter them. Predictive analysis, automated incident response, enhanced authentication… technology evolves on both sides. Ultimately, staying secure in the coming years will require a careful blend of tech and ground actions: investing in cutting-edge cybersecurity tools and cultivating good human reflexes.

The cyber war of tomorrow will not be fully automated – your vigilance and common sense will always make the difference. By staying informed, training your teams, and adopting a proactive posture, you can ride the wave of AI serenely, without tipping over to the dark side. After all, the best weapon against Skynet… is us!