July holidays require companies to be extra vigilant against cyberattacks

São Paulo, July 2026 – The July holiday period, traditionally associated with rest and travel, as well as school holidays, represents a time of heightened attention for companies from a digital security perspective. With reduced teams, increased remote work, employees accessing corporate systems from hotels, airports, and external networks, in addition to the rise in travel-related scams, organizations become more attractive targets for cybercriminals.

Bruno Caldas, Head of Cybersecurity at Skyone, observes a growth in attempted attacks, especially through credential theft, phishing campaigns, suspicious access from different locations, and scams that exploit themes such as airline tickets, hotel reservations, baggage, frequent flyer programs, and travel promotions.

“The holiday period does not reduce the risk of attacks; on the contrary. Criminals know that many companies operate with smaller teams and that there is a significant increase in remote access to corporate systems. They take advantage of this scenario to intensify attempts to steal credentials, phishing campaigns, and ransomware attacks,” says Bruno.

Another factor that contributes to increasing the risk is that, during vacations, some of the teams responsible for operations and information security are also reduced, which can increase the time needed to identify and respond to an incident.

One of the main precautions recommended by the expert is to avoid accessing corporate systems through public Wi-Fi networks. Whenever possible, it is ideal to use your own mobile phone's connection or access corporate environments via VPN. "It is also important that laptops and mobile phones are up-to-date, protected by password or biometrics, using two-step authentication and, preferably, are equipment provided and managed by the company," he warns.

If a company laptop is lost or stolen during a trip, the recommendation is to immediately notify the company so that the security team can block access, close open sessions, change credentials, and, when available, remotely erase the data stored on the device.

At the same time, criminals also use Artificial Intelligence to make scams more sophisticated and convincing, making it essential for companies to invest in equally intelligent defense mechanisms. But technology can, and should, also be used to the benefit of companies. AI allows for the analysis of large volumes of information in a few seconds, the identification of atypical behaviors, the prioritization of alerts, and the acceleration of responses to potential incidents. 

“A large part of the incidents can be avoided with relatively simple measures, such as performing backups, continuously monitoring environments, and making employees aware of the most common scams. Information security doesn't depend solely on technology; it requires planning, well-defined processes, and people prepared to identify risks on a daily basis,” concludes Caldas.

Expert care tips for businesses: 

• Keep systems and software always up to date.
• Use two-step authentication.
• Ensure continuous monitoring of the environments.
• Perform frequent backups and test your recovery capabilities.
• Review user access logs before the holiday period.
• Strengthen awareness campaigns about digital scams.

Expert care tips for employees:

Immediately notify the company if any equipment is lost or stolen.

Be wary of messages about travel, reservations, and promotions.

Do not click on links received via email or apps without verifying their source.

Avoid accessing corporate systems via public Wi-Fi networks.

Keep computers and cell phones updated.

Never share passwords.

Written by Skyone