Colombia: Prosegur flags cyber-physical risks

Prosegur Security said nearly 60% of companies in Colombia have vulnerabilities tied to connected physical systems, operational technology (OT) environments, or remote access. The coverage cited said the greatest exposure was concentrated in sectors such as telecommunications and energy, among others, and pointed to insecure configurations, compromised credentials and weak controls over remote access.

What did Prosegur find in Colombian companies?

According to information attributed to Prosegur Security, the most common findings were insecure configurations, compromised credentials and weak remote-access controls. The pattern was concentrated in environments where connected physical systems and operational technology coexist, a type of attack surface that, according to the coverage, broadens corporate exposure.

The Blog Bagatela post that summarized the data also said telecommunications and energy were among the most exposed sectors. Tecnogus, for its part, reported that the figure near 60% refers to Colombian companies with vulnerabilities in those environments.

What did the publication say about ColCERT?

The same publication said that during 2025, ColCERT expanded its monitoring from 31 to nearly 1,300 entities and handled 697 digital security incidents, but that figure could not be independently verified with an official statement or report available in the search conducted. For that reason, those data remain a reference attributed to the publication and not official confirmation.

That figure appears in the same context in which the note links the broader monitoring effort to incident handling during 2025. However, the available material does not allow separate confirmation of either the exact scope of the expansion or the total number of incidents reported by ColCERT.

The available material describes exposure and access weaknesses in Colombian companies, but it does not confirm a specific incident against a Colombian critical infrastructure operator.