The cybersecurity expert Bassam Lamouchi has warned, in a statement to Tunisie Numérique, about the growing risks of cyberattacks that could target different computer systems. He stressed that no system is completely immune to cyber threats and that prevention includes, in particular, regularly updating software, carrying out specialized security audits, and investing in the training of human resources.
These statements come after a large-scale cyberattack that occurred in France, which disrupted the refrigeration systems of several stores belonging to major grocery chains. Hackers managed to switch refrigerators and freezers into defrost mode for an entire night.
The Danish technology company Danfoss, a supplier of software for managing refrigeration systems, had noted that most of the affected installations were using older software versions that no longer received functional or security updates. It stressed the necessity of using supported versions and protecting the systems with firewalls.
System updates and security audits: priority preventive measures
Commenting on this incident, Bassam Lamouchi emphasized that cyber risks are not limited to a particular sector, warning that all computer systems can be exposed to attacks.
He explained that the main preventive measures consist of ensuring regular updates of systems and software, while conducting periodic security audits to identify vulnerabilities and potential malfunctions, and then addressing them before they can be exploited.
The expert also stressed the need to adopt proactive protection solutions and to call upon specialized auditors with recognized cybersecurity expertise.
The lack of specialized skills, a challenge for Tunisia
According to Bassam Lamouchi, the human factor constitutes one of the main pillars of cybersecurity. He thus underlined the importance of training qualified human resources, notably individuals with a high level of competence in software and computer system security.
He noted that Tunisia faces a shortage of highly qualified profiles in this field, estimating that the outward migration of a large number of specialists has contributed to reducing the number of experts available on the local market.
In this context, Bassam Lamouchi called for increased investment in continuous training and for ongoing adaptation to technological developments and new cyber threats.
Tunisian companies underinvest in cybersecurity training
The expert also pointed to the weakness of investments made by Tunisian companies in training their employees in cybersecurity, despite the essential role of this initiative in reducing cyber risks.
He explained that ongoing training and awareness help employees familiarise themselves with new updates, better understand the evolution of cyber threats, and acquire the reflexes necessary to address them.
Bassam Lamouchi thus called for strengthening awareness and training programs within companies, while favoring a preventive approach based on system updates, regular audits, and the use of specialized skills.
The artificial intelligence model “Mythos” arouses interest among cybersecurity experts
Bassam Lamouchi also addressed the rapid advances in artificial intelligence and their implications for cybersecurity, notably mentioning the “Mythos” model developed by Anthropic, which he presents as a technology that generates both keen interest and significant concerns among sector specialists.
According to his explanations, this model has advanced capabilities for detecting software vulnerabilities, including those that could affect operating systems used in firewalls, servers, and networking equipment.
He also noted that some internationally accredited auditors have access to this model for their security audit missions, highlighting the value of these advanced tools in identifying flaws and weaknesses in IT infrastructures.
In the end, Bassam Lamouchi specified that his expertise in this field remains available to his clients, while stressing the importance of keeping up with technological developments and adopting appropriate preventive measures to protect computer systems against cyber threats.
