How have cyber security threats evolved in recent years?
Diane Rambaldini - The threats remain the same. There's always the cybercriminal who's going to be nearby, trying to swindle the user and steal their information. Of course, there is always the potential thief of the phone: the theft of digital tools has totally exploded, with sales of spare parts in particular. Where things have really changed is the international context, and the relationship between states. There's no such thing as a "friendly state" any more. We need to think of all our data and digital tools as sanctuaries that need to be genuinely protected today. And all the more so when you cross borders. These days, so-called friendly countries don't hesitate to ask for your phone or computer and make copies of your data.
What should business travellers to the United States, for example, do?
Diane Rambaldini - Travellers have no choice when they travel for work. It's hard to travel with an empty tool. There are a number of tips to follow, not least the use of VPNs. When you're a professional, you need to have this reflex: a fully active VPN. Also, you shouldn't use tools that store data locally, on your phone or computer. So you need to make sure you have a VPN to reach your corporate cloud, where you can access all your data. This is extremely important, especially if the device is copied at the border, as it limits any theft of information or espionage.
What other practical advice would you give to a business traveller?
Diane Rambaldini - There are some "basic" things that we've been recommending for a long time, but which are still relevant today. Like passwords that work to protect your devices. Today, you also need to install multi-factor authentication (MFA). That's important. And then there are the behavioural aspects, to deal with the threats I was describing: I'm in the airport, waiting for my flight. Well, no, I don't connect to the airport's public wifi. It's much safer to share your phone's 4G or 5G connection. And once again, to connect to your VPN. To limit outside temptations, you can also install a confidentiality filter on your PC and phone screens, and systematically monitor your tools. Many travellers are still too careless when using transport. When it comes to watching cat videos on TikTok, it's harmless. It's less so when you're studying confidential work documents! Confidentiality filters prevent prying eyes and temptations of opportunity. In a group of fifty people going to a conference on the other side of the planet, with competitors in attendance, you might as well avoid prying eyes.
You mentioned wifi at the airport. The problem must be the same for hotels or conference centres...
Diane Rambaldini - Completely. All public wifi is to be avoided. The hotel reception desk stresses the importance of password protection, but it's easy to guess the password for a particular room - it's not rocket science. A completely guessable password is the same as not having a password at all.
We were talking about the United States, but Russia is clearly a daily threat... Is this a 'good thing' to encourage travellers to be more vigilant?
Diane Rambaldini - Yes, there is mistrust. But does that really translate into digital tools? The former president of Georgia recently explained on the radio how, very insidiously, the Russians had been able to keep them completely under wraps, digitally speaking. This is something we should listen to more. I think that using the case of Russia and what we're experiencing with the United States today helps to explain that this also involves an information war. This goes beyond pure cyber behaviour: it's about disinformation. Propaganda has become totally digital. There is a huge amount of it on social networks. We know very well that there are a lot of controversies that have arisen on social networks, totally fomented by the Russians to destabilise one nation or another. It's a - in inverted commas - "soft" action, but it's an action that works very well. What's more, I really defend the idea that cybersecurity today goes well beyond technological protection solutions. We need to raise awareness of how platforms and algorithms work, and the link with geopolitics.
And AI in all this: a good thing for users?
Diane Rambaldini - AI is everywhere, it means everything and nothing. We know very well, for example, that in the world of cybersecurity, there are now many suppliers of cybersecurity solutions who are using artificial intelligence to improve their tools, and to automate a number of things in particular. It saves them a considerable amount of time in detection. AI can be used to diagnose so many different cases... Threats can therefore be detected much more quickly, which will leave time for human beings, for analysts, to work in greater depth on the threat, to know how to take it into account and then counter it. And that's extremely important.
What about the misuse of AI?
Diane Rambaldini - We're also seeing a lot of use in cybercrime, of course. In the end, AI has no intelligence whatsoever: it doesn't realise whether a request is well-founded or not. That's why, in Europe, we also need to ask ourselves why we're using AI, and what we're really looking for as a lever for improvement.
You said earlier that there are no friendly countries left. In 2026, should business travellers be paranoid about every trip they make?
Diane Rambaldini - I think that, without being paranoid, there are nevertheless little things, reflexes that we need to have at all times to avoid giving in to the threat. Phone theft or spying can cause a lot of inconvenience that small things could prevent. Sometimes there are threats that go beyond us: it's clear that when you're targeted by high-performance tools linked to a state, things are a little more complicated. You may need to have the resources behind a company to ensure that its security and information system are up to scratch. But as an individual, as a collaborator, as an employee, as an entrepreneur, there are lots of little things you can do to deal with at least 80% of the threats, which is not bad at all! I'm thinking, for example, of the Windows + L reflex, which locks a session. A very useful little tip when you're on a plane or train and have to leave to get a coffee. Don't be fooled by USB flash drives given away at trade fairs, for example. Finally, don't hesitate to go and see your IT manager. Sometimes your company has rather complex IT charters. It's never a bad idea to ask for clarification or reminders. "Show me how to activate my VPN or change my password", "I'm not sure about an email: what should I do". You really shouldn't be afraid to ask: it's very important.
