Artificial intelligence is redefining the cybersecurity landscape at a pace few organizations can keep up with. While cybercriminals leverage AI to launch more credible phishing campaigns and automated attacks, companies are looking to bolster their defenses with measures that go beyond technology. A prime example is CaixaBank, which has created a new cybersecurity unit within its technology subsidiary, CaixaBank Tech , and appointed MarÃa Guillamón as Chief Information Security Officer (CISO) to integrate digital protection from the outset of projects.
It's no secret that AI has changed the game. Attacks no longer rely on obvious typos or generic messages; now, criminals generate personalized emails, impersonate voices with deepfakes, and tailor their strategies to each organization. The speed of both attack and defense has accelerated , and SMEs, often with fewer resources, have become vulnerable targets. In response, employee training and identity verification through alternative channels have become essential.
CaixaBank strengthens its cybersecurity structure
The financial institution has taken a significant step by creating a specialized unit within CaixaBank Tech, its innovation and technology subsidiary. MarÃa Guillamón has assumed the role of CISO for this subsidiary and will work in close coordination with Alberto Rosa, CISO of the CaixaBank Group, who leads the global cybersecurity strategy. The new team will consist of specialists who will integrate a cybersecurity perspective into all phases of the development of new technology projects, from design to implementation.
This initiative responds to a context in which the evolution of artificial intelligence and quantum computing is transforming both defense tools and threats. CaixaBank is committed to integrating security as a fundamental component of innovation , and to this end, it maintains a threat intelligence system that allows it to anticipate risks, as well as a cybersecurity ecosystem with advanced infrastructure to protect digital transactions.
Artificial intelligence, a double-edged sword
While organizations are adopting AI to improve detection and response, attackers are also using it to refine their methods. AI-generated phishing emails achieve levels of credibility comparable to those written by humans , and deepfakes allow attackers to impersonate executives in video calls, as seen in cases of multimillion-dollar fraud. The language barrier has also disappeared: AI can draft culturally credible messages in any language, expanding the reach of cybercriminals.
In this scenario, defense cannot rely solely on human perception. Trust must be verified through robust validation processes , especially when dealing with urgent or economically impactful instructions. The automation of attacks has also accelerated: from reconnaissance to exploitation, AI allows attackers to act with a speed that outpaces the response capacity of many security teams.
Training and verification, key to defense
Faced with these threats, the human factor remains the cornerstone of cybersecurity. Employee training can no longer be limited to detecting errors in emails ; it must focus on verification habits, critical thinking, and managing stressful situations. Any sensitive request, especially if urgent or confidential, should be confirmed through a previously validated alternative channel.
Small and medium-sized enterprises (SMEs), often with tight budgets, can significantly reduce risk by implementing basic measures such as securing their LAN , performing regular backups, and updating systems. With limited resources, prioritizing by impact is key , and essential controls are usually the most effective. Awareness and communication also play a crucial role: CaixaBank, for example, runs regular campaigns to inform its customers about fraud and scams.
European projects and international cooperation
CaixaBank is not only strengthening its cybersecurity internally, but also actively participating in European initiatives. It is the only Spanish financial institution involved in the VIGILANCE and CYBERAID projects , which focus on protecting critical infrastructure using artificial intelligence, blockchain, and post-quantum security solutions. Since 2018, the bank has been part of fourteen European R&D consortia funded by the European Commission, reinforcing its role in international cooperation and the advancement toward greater digital sovereignty.
These projects reflect the need for a collaborative approach among government agencies, the armed forces, industry, and specialized organizations. Europe's digital resilience depends on common standards and talent development , as well as the ability to anticipate threats that evolve at the same pace as technology itself.
Artificial intelligence is here to stay and is already transforming cybersecurity from within. Organizations that adapt their processes, train their teams, and collaborate internationally will be better prepared to face a future where digital trust is the most valuable asset. The question is no longer whether AI will change security, but whether companies will be able to adapt before the attackers.