noticias ia para empresas ciberseguridad agentes de ia

Attackers using AI agents got in through an IT provider's backup tool and attempted to infiltrate more than 2,250 corporate Microsoft 365 environments at a rate of 2,900 attempts per minute. Barclays is cutting 5,000 jobs, with AI as the finishing touch on three years of modernization, and Spain's statistics office (INE) confirms that a third of Spanish companies already use AI, even as the share with the specialists to integrate it shrinks. And the money is going to data AI can't copy: the London Stock Exchange Group is paying $3.535 billion for Octus. This follows Thursday's radar (October 22).

Hackers with AI agents get in through your IT provider's backup tool: 2,900 sign-in attempts a minute against Microsoft 365

Microsoft attributes the attack on ConnectWise Cloud Backup—the service many IT providers use to store copies of Microsoft 365 emails and files for their clients—to Storm-0940, a group aligned with the Chinese state. After stealing credentials for these applications, the group used ARTEX, an open-source tool that chains AI agents for penetration testing, and tried to sign in to more than 2,250 corporate Microsoft 365 environments at a rate of 2,900 attempts a minute. It didn't need anyone to sign in: it got in using the permissions those companies had already granted to the application. In several cases, less than three hours passed between the first contact and privileged access, and in some, the agents changed credentials to leave a backdoor that remains open even if the application is fixed. Microsoft says this is not a flaw in its products and that having the application installed does not imply data theft. ConnectWise has paused the service and is working to restore it. It's what we flagged on Tuesday, October 20: agents attack around the clock and get in wherever no one is watching. For your business: ask your IT provider today which of their tools have permissions over your Microsoft 365. Review third-party applications with access in Entra and remove what you don't use; if you were affected, don't delete anything first: preserve logs going back to October 1 and look for new credentials, mail forwarding rules, and permission changes. Reviewing those permissions once a year is MANUAL against attackers who already run UNATTENDED, holidays included. Source

Barclays cuts 5,000 jobs and its CEO warns: AI is the icing, not the cake

Barclays announced with its third-quarter results that it is cutting about 5,000 positions, nearly 5% of its global workforce: 1,000 roles have already gone and the remaining 4,000 will go by year-end. Around 60% of the cuts fall in support functions, including developers, and a significant share in India, where the bank runs back-office work for its British business. It made a £2.3 billion profit in the quarter, slightly below forecasts, and expects a further £1.1 billion of savings in 2027. CEO C. S. Venkatakrishnan puts it this way: AI is "the icing on the cake, not the cake," because you have to build the infrastructure first to get the benefits. Not all cuts are due to AI, and the Unite union accuses the bank of using it as an excuse. HSBC, Standard Chartered, and Danske Bank have also announced AI-linked cuts this year. For your business: savings arrive first in repetitive support tasks, but only after years of organizing systems and data. Before buying AI to save money, check that the process you want to automate lives in systems that can be connected, and decide in writing what people will do with the hours you free up. Without that foundation, AI stays at ASSISTED; with it, the process can become INTEGRATED. Source

A third of Spanish companies already use AI, but the number of specialists integrating it falls

Some 33.6% of Spanish companies with ten or more employees used artificial intelligence in the first quarter of 2026, 12.5 points more than a year earlier, according to the technology-use survey from Spain's National Statistics Institute (INE), which covers some 15,000 companies of that size and 10,000 smaller ones. Services is the sector that uses it most, at 38.2%. But the same report shows that the proportion of companies with technology specialists fell 1.4 points to 15.4%, and those buying cloud services fell 4.9 points to 39.4%. AI is entering companies faster than the people capable of connecting it to their processes. For your business: using ChatGPT or Copilot counts in the statistics, but it doesn't change your bottom line. What changes it is a specific process, with a named owner, internal or external, and a figure measured before and after. As we said on Wednesday, October 21, with Gartner's survey, volume is not value: write down beforehand what improvement you expect and when you'll drop it. Having licenses keeps you at ASSISTED; INTEGRATED starts when someone is accountable for the AI being inside a process that works. Source

The London Stock Exchange pays $3.535 billion for data AI can't copy

LSEG, the London Stock Exchange group, is buying Octus from funds advised by Permira and Octus' management for $3.535 billion in cash, financed with debt. Octus sources hard-to-obtain credit documentation, such as covenants and deal terms, and converts it into structured data that its clients query on its platform, via an MCP connector, or from AI workflows. It has more than 900 employees, 750 clients, and over 40,000 users, and expects revenue of more than $300 million this year with an adjusted EBITDA margin of around 40%. Closing is expected in the first half of 2027. Reuters frames it as a deal to shield LSEG from AI disruption. The logic: what a model cannot generate on its own is proprietary data that no one else has (Reuters). For your business: your records of quotes, incidents, prices or customers are worth more organized than scattered across emails and stray spreadsheets. Start with one, give it a format and an owner, and think about how an agent would query it. Data only its creator understands keeps you at ASSISTED; the same data, structured and accessible, is the foundation of INTEGRATED. Source

What to watch next

Whether ConnectWise restores its backup service this weekend and whether any affected companies are named. And whether Anthropic makes its IPO prospectus public, which the financial press says could come as soon as this Friday.